Re: complete forensics suite for linux?

Página superior
Adjuntos:
Obtener este mensaje como un correo
+ (text/plain)
+ (application/pgp-signature)
Eliminar este mensaje
Responder a este mensaje
Autor: Technomage
Fecha:  
A: plug-discuss
Asunto: Re: complete forensics suite for linux?
On Tuesday 19 April 2005 19:45, wrote:
> When you say forensics suit, are you looking for something that will
> extract deleted files, or something that will guide you through system
> snooping, or something that will automatically produce an admissible
> custody trail that is court trusted. The first is about getting your
> information, the second some one else’s, the third is only for law
> enforcement.


I am looking for something that will do EVERYTHING. recovery of undeleted
files, magnetic field analysis, etc.

>
> There are a number of good packages for the first, a few for the second
> (though I always felt like working on one), and I do not know any Linux
> solutions for the third, though computer forensics is a big deal,
> particularly for the IRS. (What do you want I’m an accountant ;)


TMH