On Tuesday 19 April 2005 19:45,
Bryan.ONeal@asu.edu wrote:
> When you say forensics suit, are you looking for something that will
> extract deleted files, or something that will guide you through system
> snooping, or something that will automatically produce an admissible
> custody trail that is court trusted. The first is about getting your
> information, the second some one elses, the third is only for law
> enforcement.
I am looking for something that will do EVERYTHING. recovery of undeleted
files, magnetic field analysis, etc.
>
> There are a number of good packages for the first, a few for the second
> (though I always felt like working on one), and I do not know any Linux
> solutions for the third, though computer forensics is a big deal,
> particularly for the IRS. (What do you want Im an accountant ;)
TMH