NISER National ICT and Security Emergency Response Centre

Computer Forensics Laboratory

Main " Services " Case Studies " Tools " Contact Us " NISER

Windows Tools | Linux Tools

Disclaimer:
The information in this document is provided "AS IS" without warranty of any kind. Any information provided is best within the knowledge at the time it was written. NISER is not and will not be accountable to any damage done in respect to the information provided. This document may refer to other sources provided by other organizations or people in order to assist the Internet users.

Imaging	Analyser	Recovery	Anti Virus/Trojan
	TCT
	TCTUtil
	Autopsy

Device Locker	Media Wiper	Viewer/Editor	System Maintanance

TCT	TCT is a collection of programs for a post-mortem analysis of a UNIX system. Notable TCT components are the grave-robber tool that captures information, the ils and mactime tools that display access patterns of files dead or alive, the unrm and lazarus tools that recover deleted files, and the findkey tool that recovers cryptographic keys from a running process or from files.
Homepage	http://www.porcupine.org/forensics/

TCTUtils	TCTUTILs is a collection of utilities that adds functionality to The Coroners Toolkit (TCT).
Autopsy	The Autopsy Forensic Browser is an HTML based front-end interface to TCT and TCTUTILs. It allows an investigator to browse forensic images (an image generated from using dd(1)) from a file, inode, or block level abstraction. It also provides a convenient interface for searching for key words on an image
Homepage	http://www.cerias.purdue.edu/homes/carrier/forensics/