September 05, 2006

Sleuth Kit now has Windows binaries

Oh this is kewl. The OSS project Sleuth Kit now has binaries for Windows.

If you don't know, Sleuth Kit is an excellent set of OSS computer forensic tools to help you investigate data on harddisks. My favorite tool is mactime, which lets you build a timeline of access to a file, helping to determine just what an attacker did on the system.

If you can't afford EnCase, Sleuth Kit is a powerful set of tools you might find useful. Check it out.

Posted by SilverStr at September 5, 2006 09:05 AM | TrackBack
Comments

I normally use the Helix distribution for this type of work but have been looking for a way to do everything from my MacBook Pro. Do you know if this has been ported to OS X?

In the mean time I am going to make an attempt to install from source.

Posted by: DaKahuna at September 5, 2006 04:16 PM