Computer Forensics Software


TCTUTILs and Autopsy will be presented at SANSFIRE
Some examples from The Forensic Challenge (submission)
An example for Scan #15 of the Honeynet Project.

TCTUTILs

TCTUTILs is a collection of utilities that adds functionality to The Coroners Toolkit (TCT).

tctutils-1.01.tar.gz (sig) readme (5/29/01)
tctutils-1.00.tar.gz (sig) readme (3/19/01)

Features: Requirements: Platforms:

Autopsy Forensic Browser

The Autopsy Forensic Browser is an HTML based front-end interface to TCT and TCTUTILs. It allows an investigator to browse forensic images (an image generated from using dd(1)) from a file, inode, or block level abstraction. It also provides a convenient interface for searching for key words on an image.

screen shots from the Forensics Challenge
autopsy-1.01.tar.gz (sig) readme (5/29/01)
autopsy-1.00.tar.gz (sig) readme (3/19/01)

Features: Requirements:


Last Updated: May 29, 2001
carrier@cerias.purdue.edu
This software is not a result of Purdue University or CERIAS funded research