Linux forensics

General (Technical, Procedural, Software, Hardware etc.)

Last Post by pgd1983 3 years ago

1 Posts

1 Users

0 Reactions

1,386 Views

RSS

pgd1983

(@pgd1983)

Active Member

Joined: 3 years ago

Posts: 13

Topic starter 28/10/2021 12:40 am

Hello,

is there a good Tool for Linux forensics? I am aware I can use TSK and multiple small tools for spezialized Tasks but is there nothing that work like Belkasoft X, OSForensics or tools like that?

At least I would want to have a tool that parse various logfiles and artefacts and offer me a nicely structured overview. Autopsy is not bad but just do a small fraction of the needed tasks. Are there some Ingest Modules which would get me a few steps further? Especially parsing the Logs and incooperating some important events into the Timeline would be nice!

How is EnCase or FTK doing on a Linux case?

Quote

Topic Tags

linux