Re: Windows forensics with Linux analysis machine

From: kris carlier (krisat_private)
Date: Thu Aug 21 2003 - 04:49:54 PDT

Next message: Christopher N. Hyde: "RE: Windows forensics with Linux analysis machine"

Previous message: Harlan Carvey: "Data hidden in Word documents"
In reply to: J: "Windows forensics with Linux analysis machine"
Next in thread: Christopher N. Hyde: "RE: Windows forensics with Linux analysis machine"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi JJ,

> I'm looking for good tools that will allow me to do a full investigation of a Windows image using linux.  I'm looking at Autopsy and Sleuthkit now.  Are there any other tools that will allow me to do the full investigation (view registry structures, undelete files, etc) under linux?

google is your friend for:

fatback (if you're on a FAT filesystem), kdbx,libdbx and outport (for
Outlook(Express) mailfiles.

kr=



-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Christopher N. Hyde: "RE: Windows forensics with Linux analysis machine"
Previous message: Harlan Carvey: "Data hidden in Word documents"
In reply to: J: "Windows forensics with Linux analysis machine"
Next in thread: Christopher N. Hyde: "RE: Windows forensics with Linux analysis machine"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Aug 21 2003 - 14:46:08 PDT