[sleuthkit-users] Gentoo Questions

[Stuart B. <e_t...@ya...>]

Hi All

Having recently had my linux exam box upgraded I decided to have a crack 
at a new setup so I took the plunge and had a go at installing Gentoo 
from their new installer CD. After a few weeks of general use I am very 
happy with it and it seems very stable.

The first thing I wanted to ask is whether Gentoo is a good base for 
forensic work. As far as I can tell it does not auto mount anything 
without my say so, but are there any other areas of the distro I need to 
look at to make the environment forensically sound?

Secondly, I have installed sleuthkit and autopsy via portage. I can run 
autopsy alright but cannot for the life of me find the directory that 
sleuthkit was installed to so that I can run stuff from the commandline. 
I have tried "find" and "locate" etc but I still can't find the folder 
containing all the commands.

I am on Gentoo 2006.0 with  kernel-genkernel-x86-2.6.15-gentoo-r5 if 
that helps.

Any advice appreciated.

Stu Bird


		
___________________________________________________________ 
Switch an email account to Yahoo! Mail, you could win FIFA World Cup tickets. http://uk.mail.yahoo.com