JJ, There are a number of good tools available for analysis using Linux. I am not a Linux expert personally so I will defer making any recommendation other than suggestion you look at the Linux_Forensics listserve at Yahoo groups (http://groups.yahoo.com/group/linux_forensics/). It is a great forum for discussing this topic since many the key players in the Linux forensic arena are regular contributors. Chris Christopher Hyde Digital Forensics Analyst WetStone Technologies, Inc. Voice:607-756-6086 Fax: 607-756-6084 Email: chrisat_private Web: www.wetstonetech.com -----Original Message----- From: JJ [mailto:jjhorner@SAFe-mail.net] Sent: Wednesday, August 20, 2003 3:30 PM To: forensicsat_private Subject: Windows forensics with Linux analysis machine All, I'm looking for good tools that will allow me to do a full investigation of a Windows image using linux. I'm looking at Autopsy and Sleuthkit now. Are there any other tools that will allow me to do the full investigation (view registry structures, undelete files, etc) under linux? Thanks, JJ --------------------- J. J. Horner CISSP,CCNA,CHSS,CHP ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Thu Aug 21 2003 - 14:55:25 PDT