RE: Windows forensics with Linux analysis machine

From: tetsujin (tetsujinat_private)
Date: Wed Aug 20 2003 - 18:03:12 PDT

  • Next message: Mark G. Spencer: "MS SQL Forensics?" 

    All you'll ever need.

http://www.meliorinc.com/html/fire_cd.html

Enjoy


-----Original Message-----
From: JJ [mailto:jjhorner@SAFe-mail.net] 
Sent: Wednesday, August 20, 2003 3:30 PM
To: forensicsat_private
Subject: Windows forensics with Linux analysis machine

All,

I'm looking for good tools that will allow me to do a full investigation of
a Windows image using linux.  I'm looking at Autopsy and Sleuthkit now.  Are
there any other tools that will allow me to do the full investigation (view
registry structures, undelete files, etc) under linux?

Thanks,
JJ

---------------------
J. J. Horner
CISSP,CCNA,CHSS,CHP

-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com




-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

    This archive was generated by hypermail 2b30 : Thu Aug 21 2003 - 14:03:53 PDT