Forensic Tools logo
    • Home
    • Forensic Tools
    • Insights
    Sign in or Register

    The Coroner’s Toolkit

    • Price
      $0
    • Website
    • Profile
    • Reviews 0
    • prev
    • next
    • Bookmark
    • Share
    • Leave a review
    • prev
    • next
    Gallery
    Description

    The Coroner’s Toolkit is a collection of programs by Dan Farmer and Wietse Venema for a post-mortem analysis of a UNIX system. The software was presented first in a Computer Forensics Analysis class in August 1999 (handouts can be found here). Examples of using TCT can be found in our Forensic Discovery book.

    Note: consider using Brian Carrier's Sleuthkit. It is the official successor, based on parts from TCT. Development of the Coroner's Toolkit was stopped years ago. It is updated only for for bugfixes which are very rare, and after Wietse discovers that the programs no longer work on a new machine.

    Features
    Notable The Coroner’s Toolkit components are the grave-robber tool that captures information, the ils and mactime tools that display access patterns of files dead or alive, the unrm and lazarus tools that recover deleted files, and the findkey tool that recovers cryptographic keys from a running process or from files.

    Warning
    This software is not for the faint of heart. It is relatively unpolished compared to the software that Dan and Wietse usually release. The Coroner’s Toolkit can spend a lot of time collecting data. And although it collects lots of data, many analysis tools still need to be written.

    URL: http://www.porcupine.org/forensics/tct.html

    Technical Specifications
    • Supported Platforms
      Linux
    • Supported Sources
      Computer
  • No comments yet.
  • Add a review

    Leave a Reply · Cancel reply

    You must be logged in to post a comment.

    You May Also Be Interested In

    MAGNET AXIOM

    Registry Recon

    MAGNET AUTOMATE Enterprise

    • About Us
    • Privacy Policy
    • Contact Us

    © 2024 – Lexeprint Inc.

    Cart

      • Facebook
      • Twitter
      • WhatsApp
      • Telegram
      • LinkedIn
      • Tumblr
      • VKontakte
      • Mail
      • Copy link
      Manage Consent
      To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
      Functional Always active
      The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
      Preferences
      The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
      Statistics
      The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
      Marketing
      The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
      Manage options Manage services Manage {vendor_count} vendors Read more about these purposes
      View preferences
      {title} {title} {title}

      Subscribe to Our Newsletter!

      * indicates required






      Please select all the ways you would like to hear from :


      You can unsubscribe at any time by clicking the link in the footer of our emails. For information about our privacy practices, please visit our website.

      We use Mailchimp as our marketing platform. By clicking below to subscribe, you acknowledge that your information will be transferred to Mailchimp for processing. Learn more about Mailchimp's privacy practices here.