Open Source Forensic Tools
| Tool Name | The Coroner's Toolkit (TCT) |
|---|---|
| Description | TCT is a collection of programs by Dan Farmer and Wietse Venema for a post-mortem analysis of a UNIX system after break-in. |
| Operating System | Unix |
| Link | http://www.porcupine.org/forensics/tct.html#source_code |