"I found this to be a very useful package of tools that gives you a good snapshot of the state of a compromised machine. While not being designed for a newbie it would still allow a less experienced Admin to collect the data so that someone with more experience could look at later. " . . .
"I found this to be a very useful package of tools that gives you a good snapshot of the state of a compromised machine. While not being designed for a newbie it would still allow a less experienced Admin to collect the data so that someone with more experience could look at later. " The Coroner's Toolkit (TCT) is a suite of tools written by Wietse Venema and Dan Farmer that was written to help a System Admin doing forensic analysis on their cracked Unix box. The tools are written in a mixture of c and perl. The authors say that TCT does not have one single goal, but instead it has the theme of making a snapshot of the machine so that there can be an attempt towards reconstruction of the past. The software is released under the IBM Public License and all source code is included.
Read this full article at RootPrompt.org
|
|
Only registered users can write comments.
Please login or register.
Powered by AkoComment!