RE: Windows forensics with Linux analysis machine

["Christopher N. Hyde" <[EMAIL PROTECTED]>]

JJ,

There are a number of good tools available for analysis using Linux.  I am
not a Linux expert personally so I will defer making any recommendation
other than suggestion you look at the Linux_Forensics listserve at Yahoo
groups (http://groups.yahoo.com/group/linux_forensics/).  It is a great
forum for discussing this topic since many the key players in the Linux
forensic arena are regular contributors.

Chris

Christopher Hyde
Digital Forensics Analyst
WetStone Technologies, Inc.
Voice:607-756-6086
Fax: 607-756-6084
Email: [EMAIL PROTECTED]
Web: www.wetstonetech.com

-----Original Message-----
From: JJ [mailto:[EMAIL PROTECTED]
Sent: Wednesday, August 20, 2003 3:30 PM
To: [EMAIL PROTECTED]
Subject: Windows forensics with Linux analysis machine


All,

I'm looking for good tools that will allow me to do a full investigation of
a Windows image using linux.  I'm looking at Autopsy and Sleuthkit now.  Are
there any other tools that will allow me to do the full investigation (view
registry structures, undelete files, etc) under linux?

Thanks,
JJ

---------------------
J. J. Horner
CISSP,CCNA,CHSS,CHP

-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com


-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com