homepage
Open menu
Contact Sales

The Coroners Toolkit - In depth

In this paper I will describe evidence gathering on a Unix system using 'The Coroners Toolkit' version 1.09 (TCT). TCT is freeware. The two types of evidence I will focus on are ephemeral and static evidence. Ephemeral evidence refers to evidence, which generally doesn't last a long time. They are...
By
Clarke Jeffris
February 9, 2002
Download

All papers are copyrighted. No re-posting of papers is permitted

470x382_Generic_Whitepaper.jpg

Related Content

Blog
DFIR - Blog - Reflections on the US Government’s OIG Report_340 x 340.jpg
Digital Forensics, Incident Response & Threat Hunting
Reflections on the US Government’s OIG Report on CISA’s Automated Indicator Sharing Program
The memorandum outlined findings and recommendations for improving perceived deficiencies with one of its information sharing programs.
John_Doyle_370x370.png
John Doyle
read more
Blog
Security Awareness, Artificial Intelligence (AI), Digital Forensics, Incident Response & Threat Hunting, Cloud Security, Cyber Defense, Offensive Operations, Pen Testing, and Red Teaming, Industrial Control Systems Security, Open-Source Intelligence (OSINT)
Top SANS Summit Talks of 2024
This year, SANS hosted 13 Summits from OSINT, ICS, Ransomware, DFIR to HackFest. Here were the top-rated talks of the year.
370x370-person-placeholder.png
Alison Kim
read more
Blog
DFIR - Blog - SOF-ELK's Evolution- A Comprehensive Update for Enhanced Digital Forensics_340 x 340(1).jpg
Digital Forensics, Incident Response & Threat Hunting
SOF-ELK®'s Evolution: A Comprehensive Update for Enhanced Digital Forensics
SOF-ELK is a free, open source bootable VM preconfigured with a custom Elastic Stack implementation tailored to security and investigative workflows.
Phil Hagen
Phil Hagen
read more