TCT is a collection of programs for a post-mortem analysis of a UNIX system after break-in. It enables you to collect data regarding deleted files, modification times of files and more.
Install this BEFORE you need to use it, so you do not risk destroying essential forensic data before you begin.
Tools contained within this package: grave-robber, lazarus, inode-cat, ils, unrm and pcat.
|
|
|
| 硬件架构 | 软件包大小 | 安装后大小 | 文件 |
|---|---|---|---|
| amd64 | 163.5 kB | 604 kB | [文件列表] |
| armel | 153.6 kB | 596 kB | [文件列表] |
| hppa | 170.0 kB | 608 kB | [文件列表] |
| i386 | 158.5 kB | 588 kB | [文件列表] |
| ia64 | 166.9 kB | 652 kB | [文件列表] |
| mips | 159.8 kB | 608 kB | [文件列表] |
| mipsel | 158.5 kB | 608 kB | [文件列表] |
| powerpc | 158.3 kB | 600 kB | [文件列表] |
| s390 | 158.9 kB | 596 kB | [文件列表] |
| sparc | 160.6 kB | 596 kB | [文件列表] |