Re: [sleuthkit-users] Manual

[Brian C. <ca...@sl...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On May 27, 2004, at 10:03 PM, Rick Mayberry wrote:

> can someone please point me in the direction of any
> kind of a user manual or a tips and tricks page for the
> Sleuth kit.

Check out sleuthkit.org or the reading room area of SANS.  The 2nd 
edition of the Honeynet Know Your Enemy book (which just came out this 
week) uses Autopsy and TSK for the UNIX and Windows forensics chapters 
(Rob Lee wrote the Windows chapter and I wrote the UNIX chapter).  
There is also Barry Grundy's guide 
(ftp://ftp.hq.nasa.gov/pub/ig/ccd/linuxintro/).

brian


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFAtr+fOK1gLsdFTIsRAh0NAJ0aKaJ2sSMl4vHSR6Sxoa4HRmhxQACdF3TL
TWiCFFH4IjDuSW2pQxqgV+o=
=vdJi
-----END PGP SIGNATURE-----