[  etch  ] [  etch-m68k  ] [  lenny  ] [  squeeze  ] [  sid  ]
[ Source: tct  ]

Package: tct (1.19-1 and others)

collection of forensics related utilities

TCT is a collection of programs for a post-mortem analysis of a UNIX system after break-in. It enables you to collect data regarding deleted files, modification times of files and more.

Install this BEFORE you need to use it, so you do not risk destroying essential forensic data before you begin.

Tools contained within this package: grave-robber, lazarus, inode-cat, ils, unrm and pcat.

Tags: User Interface: Command Line, Role: Program, Scope: Utility, Security: Forensics, Intrusion Detection

Other Packages Related to tct

  • depends
  • recommends
  • suggests
  • dep: file
    Determines file type using "magic" numbers
  • dep: libc6 (>= 2.1.3) [i386]
    GNU C Library: Shared libraries
    also a virtual package provided by libc6-udeb
    dep: libc6 (>= 2.2) [hppa, mips, mipsel]
    dep: libc6 (>= 2.2.5) [amd64]
    dep: libc6 (>= 2.4) [armel, powerpc, s390]
    dep: libc6 (>= 2.5) [avr32]
    dep: libc6 (>= 2.5-5) [m68k]
    dep: libc6 (>= 2.6) [sparc]
  • dep: libc6.1 (>= 2.2) [ia64]
    GNU C Library: Shared libraries
    also a virtual package provided by libc6.1-udeb
    dep: libc6.1 (>= 2.4) [alpha]
  • dep: libdate-manip-perl
    a perl library for manipulating dates
  • dep: timeout [m68k]
    run a command with a time limit
  • dep: timeout [not m68k]
    run a command with a time limit
    or coreutils (>= 7.5-1)
    GNU core utilities
  • rec: lsof
    List open files
  • sug: acct
    The GNU Accounting utilities for process and login accounting

Download tct

Download for all available architectures
Architecture Version Package Size Installed Size Files
alpha 1.19-1 162.0 kB616 kB [list of files]
amd64 1.19-1 163.5 kB604 kB [list of files]
armel 1.19-1 153.6 kB596 kB [list of files]
avr32 (unofficial port) 1.19-1 156.8 kB580 kB [list of files]
hppa 1.19-1 170.0 kB608 kB [list of files]
i386 1.19-1 158.5 kB588 kB [list of files]
ia64 1.19-1 166.9 kB652 kB [list of files]
m68k (unofficial port) 1.18-3 156.6 kB584 kB [list of files]
mips 1.19-1 159.8 kB608 kB [list of files]
mipsel 1.19-1 158.5 kB608 kB [list of files]
powerpc 1.19-1 158.3 kB600 kB [list of files]
s390 1.19-1 158.9 kB596 kB [list of files]
sparc 1.19-1 160.6 kB596 kB [list of files]