The Coroner's Toolkit (TCT) |
||||||||||||||||||||
|
Description
The Coroner's Toolkit (TCT) is a collection of programs by Dan Farmer and Wietse Venema for a post-mortem analysis of a UNIX system after a break-in. TCT enables you to collect date regarding deleted files, modification times of files and more.
Install this BEFORE you need to use it, so you don't risk destroying essential forensic data before you begin. Tools contained within this package: grave-robber, lazarus, inode-cat (ex icat), ils, unrm and pcat. |
||||||||||||||||||||
|
Home Page: http://www.porcupine.org/forensics/tct.html
|
||||||||||||||||||||
|
Interface: Command Line
|
||||||||||||||||||||
|
Associated Programs
|
||||||||||||||||||||
|
Available deb Repositories (how-to add a respository)
|
||||||||||||||||||||
|
Rating: Not Rated (0 votes)
Login or Register to rate The Coroner's Toolkit (TCT), add a Tag, or designate as an alternative to a Windows app |
|
|
Upload Screenshots
Images must be in GIF, JPG, or PNG formats and can be no larger than 2 MB. Only one file can be uploaded at a time. A description can be included, but it is optional.
|
|
|
Submit Web Links
Submit the title and link (including http://) to an article pertaining to The Coroner's Toolkit (TCT) and it will appear in the Web Links section of the right banner. Contact us here if an entry needs to be removed.
|
|



Recent comments
1 day 9 hours ago
4 days 21 hours ago
5 days 18 hours ago
5 days 20 hours ago
5 days 21 hours ago
5 days 21 hours ago
5 days 21 hours ago
6 days 16 hours ago
1 week 39 min ago
1 week 20 hours ago