The Coroner's Toolkit (TCT) is a collection of programs by Dan Farmer and Wietse Venema for a post-mortem analysis of a UNIX system after a break-in. TCT enables you to collect date regarding deleted files, modification times of files and more.
Install this BEFORE you need to use it, so you don't risk destroying essential forensic data before you begin.
Tools contained within this package: grave-robber, lazarus, inode-cat (ex icat), ils, unrm and pcat.
|
|
|
| 硬件架构 | 软件包大小 | 安装后大小 | 文件 |
|---|---|---|---|
| alpha | 163.2 kB | 604 kB | [文件列表] |
| amd64 | 153.9 kB | 588 kB | [文件列表] |
| arm | 146.9 kB | 580 kB | [文件列表] |
| armel | 155.7 kB | 584 kB | [文件列表] |
| hppa | 160.5 kB | 592 kB | [文件列表] |
| i386 | 146.3 kB | 520 kB | [文件列表] |
| ia64 | 165.9 kB | 640 kB | [文件列表] |
| mips | 160.6 kB | 596 kB | [文件列表] |
| mipsel | 150.2 kB | 596 kB | [文件列表] |
| powerpc | 150.4 kB | 592 kB | [文件列表] |
| s390 | 150.1 kB | 584 kB | [文件列表] |
| sparc | 147.8 kB | 584 kB | [文件列表] |