Linux Operating System (en) - Revision history

Onnowpurbo: /* Investigation Tools and Techniques */

2024-11-02T01:37:12Z

Investigation Tools and Techniques

2024-11-02T01:35:40Z

Investigation Tools and Techniques

2024-11-02T01:31:29Z

Investigation Tools and Techniques

2024-11-02T01:28:47Z

Investigation Tools and Techniques

2024-11-02T01:21:31Z

Investigation Tools and Techniques

2024-11-02T01:08:48Z

Investigation Tools and Techniques

2024-11-02T01:03:46Z

Investigation Tools and Techniques

2024-10-29T02:48:27Z

Investigation Tools and Techniques

2024-10-29T02:44:32Z

Investigation Tools and Techniques

2024-10-29T02:27:20Z

Investigation Tools and Techniques

@@ Line 100: / Line 100: @@
 ** '''awk:''' Processes text files and generates reports.
 ** '''tail:''' Displays the last few lines of a file.
-head: Displays the first few lines of a file.
+** '''head:''' Displays the first few lines of a file.
 ==Conclusion==

@@ Line 93: / Line 93: @@
 ** '''Open Computer Forensics Architecture (OCFA):''' Framework for integrating digital forensics tools and processes.
 ** '''HashKeeper:''' Hash calculation and comparison tool for identifying duplicate files.
-Bulk Extractor: File carving tool for recovering files from damaged or formatted media.
+** '''Bulk Extractor:''' File carving tool for recovering files from damaged or formatted media.
 ** '''Computer-Aided Investigative Environment (CAINE):''' Linux-based live forensic distribution with integrated tools.
-* '''Log file analysis:''' grep, sed, awk, tail, head
+* '''Log file analysis:'''
 ==Conclusion==

@@ Line 84: / Line 84: @@
 ** '''Trinity Rescue Kit:''' A Linux-based bootable rescue disk that includes a variety of tools for system repair, data recovery, and security tasks.
-* '''Forensic tools:''' EnCase, The Sleuth Kit (TSK), Autopsy, Volatility, Xplico, Digital Forensics Framework, Open Computer Forensics Architecture (OCFA), HashKeeper, Bulk Extractor, Computer-Aided Investigative Environment
+* '''Forensic tools:'''
 * '''Log file analysis:''' grep, sed, awk, tail, head

@@ Line 70: / Line 70: @@
 ==Investigation Tools and Techniques==
-* '''File system tools:''' fsck, e2fsck, mke2fs
+* '''File system tools:'''
-* '''Disk imaging tools:''' dd, dcfldd, partimage, Clonezilla, Mondo rescue, Redo backup and recovery, Trinity Rescue Kit
+** '''fsck:''' Checks and repairs file system inconsistencies.
 * '''Forensic tools:''' EnCase, The Sleuth Kit (TSK), Autopsy, Volatility, Xplico, Digital Forensics Framework, Open Computer Forensics Architecture (OCFA), HashKeeper, Bulk Extractor, Computer-Aided Investigative Environment
 * '''Log file analysis:''' grep, sed, awk, tail, head

@@ Line 71: / Line 71: @@
 * '''File system tools:''' fsck, e2fsck, mke2fs
-* '''Disk imaging tools:''' dd, dcfldd
+* '''Disk imaging tools:''' dd, dcfldd, partimage, Clonezilla, Mondo rescue, Redo backup and recovery, Trinity Rescue Kit
 * '''Forensic tools:''' EnCase, The Sleuth Kit (TSK), Autopsy, Volatility, Xplico, Digital Forensics Framework, Open Computer Forensics Architecture (OCFA), HashKeeper, Bulk Extractor, Computer-Aided Investigative Environment
 * '''Log file analysis:''' grep, sed, awk, tail, head

@@ Line 72: / Line 72: @@
 * '''File system tools:''' `fsck`, `e2fsck`, `mke2fs`.
 * '''Disk imaging tools:''' `dd`, `dcfldd`.
-* '''Forensic tools:''' `Autopsy`, `The Sleuth Kit`, `EnCase`.
+* '''Forensic tools:''' EnCase, The Sleuth Kit (TSK), Autopsy, Volatility, Xplico
 * '''Log file analysis:''' grep, sed, awk, tail, head