|
|
|
Date Submitted:
08/05/05
Hits: 46 Rating:  based on 0 votes
The Coroners Toolkit - In depthAdded by Papergrl
Description:
In this paper I will describe evidence gathering on a Unix system using "The Coroners Toolkit" version 1.09 hereafter referred to as TCT. TCT can be downloaded freely from porcupine.org/forensics/tct.html. The two types of evidence I will focus on are ephemeral and static evidence. Ephemeral evidence refers to evidence, which generally doesn't last a long time.
Read the Complete Paper You don't have permission to post replies. Please login or register. |