etch  ] [  etch-m68k  ] [  lenny  ] [  squeeze  ] [  sid  ]
[ 源代码: tct  ]

软件包: tct (1.11-6.5)

Forensics related utilities.

The Coroner's Toolkit (TCT) is a collection of programs by Dan Farmer and Wietse Venema for a post-mortem analysis of a UNIX system after a break-in. TCT enables you to collect date regarding deleted files, modification times of files and more.

Install this BEFORE you need to use it, so you don't risk destroying essential forensic data before you begin.

Tools contained within this package: grave-robber, lazarus, inode-cat (ex icat), ils, unrm and pcat.

标签: User Interface: Command Line, Role: Program, Scope: Utility, Security: Forensics, Intrusion Detection

其它与 tct 有关的软件包

  • 依赖
  • 推荐
  • 建议
  • dep: file
    通过特征码确定文件类型
  • dep: libc6 (>= 2.7-1) [除 alpha, ia64]
    GNU C 语言运行库:共享库
    同时作为一个虚包由这些包填实: libc6-udeb
  • dep: libc6.1 (>= 2.7-1) [alpha, ia64]
    GNU C 语言运行库:共享库
    同时作为一个虚包由这些包填实: libc6.1-udeb
  • dep: libdate-manip-perl
    a perl library for manipulating dates
  • dep: perl
    Larry Wall 的实用抽取和报表语言(Practical Extraction and Report Language)
  • dep: timeout
    Run a command with a time limit.
  • rec: lsof
    列出打开的文件
  • sug: acct
    The GNU Accounting utilities for process and login accounting

下载 tct

下载可用于所有硬件架构的
硬件架构 软件包大小 安装后大小 文件
alpha 163.2 kB604 kB [文件列表]
amd64 153.9 kB588 kB [文件列表]
arm 146.9 kB580 kB [文件列表]
armel 155.7 kB584 kB [文件列表]
hppa 160.5 kB592 kB [文件列表]
i386 146.3 kB520 kB [文件列表]
ia64 165.9 kB640 kB [文件列表]
mips 160.6 kB596 kB [文件列表]
mipsel 150.2 kB596 kB [文件列表]
powerpc 150.4 kB592 kB [文件列表]
s390 150.1 kB584 kB [文件列表]
sparc 147.8 kB584 kB [文件列表]