Download Source Package tct:
TCT is a collection of programs for a post-mortem analysis of a UNIX system after break-in. It enables you to collect data regarding deleted files, modification times of files and more.
Install this BEFORE you need to use it, so you do not risk destroying essential forensic data before you begin.
Tools contained within this package: grave-robber, lazarus, inode-cat, ils, unrm and pcat.
|
|
|
| Architecture | Package Size | Installed Size | Files |
|---|---|---|---|
| alpha | 162.3 kB | 616 kB | [list of files] |
| amd64 | 160.0 kB | 548 kB | [list of files] |
| armel | 153.1 kB | 596 kB | [list of files] |
| avr32 (unofficial port) | 158.3 kB | 580 kB | [list of files] |
| hppa | 169.7 kB | 604 kB | [list of files] |
| i386 | 154.7 kB | 588 kB | [list of files] |
| ia64 | 168.9 kB | 652 kB | [list of files] |
| m68k (unofficial port) | 156.6 kB | 584 kB | [list of files] |
| mips | 159.2 kB | 608 kB | [list of files] |
| mipsel | 160.1 kB | 608 kB | [list of files] |
| powerpc | 159.9 kB | 600 kB | [list of files] |
| s390 | 160.5 kB | 596 kB | [list of files] |
| sparc | 157.8 kB | 592 kB | [list of files] |