The Coroner's Toolkit
From Wikipedia, the free encyclopedia
The Coroner's Toolkit | |
---|---|
Design by | Dan Farmer and Wietse Venema |
Latest release | 1.18 |
OS | Unix-like |
Genre | Computer forensics |
Website | http://www.porcupine.org/forensics/tct.html |
The Coroner's Toolkit (or TCT) is a suite of computer security programs by Dan Farmer and Wietse Venema. It is intended to assist in a forensic analysis of a UNIX system after a break-in.
The suite runs on FreeBSD, OpenBSD, BSD/OS, SunOS/Solaris and Linux. There is also a port to HP-UX.
Parts of TCT are also somewhat applicable to analysis of and data recovery from other computer disasters.