The Coroner's Toolkit (TCT) is a collection of programs by Dan Farmer and Wietse Venema for a post-mortem analysis of a UNIX system after a break-in. TCT enables you to collect date regarding deleted files, modification times of files and more.
Install this BEFORE you need to use it, so you don't risk destroying essential forensic data before you begin.
Tools contained within this package: grave-robber, lazarus, inode-cat (ex icat), ils, unrm and pcat.
|
|
|
| Arkkitehtuuri | Paketin koko | Koko asennettuna | Tiedostot |
|---|---|---|---|
| alpha | 163.2 kt | 604 kt | [tiedostoluettelo] |
| amd64 | 153.9 kt | 588 kt | [tiedostoluettelo] |
| arm | 146.9 kt | 580 kt | [tiedostoluettelo] |
| armel | 155.7 kt | 584 kt | [tiedostoluettelo] |
| hppa | 160.5 kt | 592 kt | [tiedostoluettelo] |
| i386 | 146.3 kt | 520 kt | [tiedostoluettelo] |
| ia64 | 165.9 kt | 640 kt | [tiedostoluettelo] |
| mips | 160.6 kt | 596 kt | [tiedostoluettelo] |
| mipsel | 150.2 kt | 596 kt | [tiedostoluettelo] |
| powerpc | 150.4 kt | 592 kt | [tiedostoluettelo] |
| s390 | 150.1 kt | 584 kt | [tiedostoluettelo] |
| sparc | 147.8 kt | 584 kt | [tiedostoluettelo] |