Difference between revisions of "Case Studies"
From SleuthKitWiki
m (Undo revision 11312 by Apriestman (talk)) |
Apriestman (Talk | contribs) |
||
| Line 3: | Line 3: | ||
Scan of the Month #29 - Linux VMWare (September 2003) | Scan of the Month #29 - Linux VMWare (September 2003) | ||
| − | * [http:// | + | * [http://www.honeynet.org/scans/scan29/ The Challenge] |
| − | * [http://www. | + | * [http://www.sleuthkit.org/case/sotm_29/index.html Report] |
Scan of the Month #26 - FAT 12 Floppy - Part 2 (February 2003) | Scan of the Month #26 - FAT 12 Floppy - Part 2 (February 2003) | ||
| − | * [http:// | + | * [http://www.honeynet.org/scans/scan26/ The Challenge] |
| − | * [http://www. | + | * [http://www.sleuthkit.org/case/sotm_26/index.html Report] |
Scan of the Month #24 - FAT 12 Floppy - Part 1 (October 2002) | Scan of the Month #24 - FAT 12 Floppy - Part 1 (October 2002) | ||
* [http://www.honeynet.org/scans/scan24/ The Challenge] | * [http://www.honeynet.org/scans/scan24/ The Challenge] | ||
| − | * [http://www. | + | * [http://www.sleuthkit.org/case/sotm_24/index.html Report] |
Scan of the Month #15 - Recover a deleted Linux rootkit (May 2001) | Scan of the Month #15 - Recover a deleted Linux rootkit (May 2001) | ||
| − | * [http://www. | + | * [http://www.honeynet.org/scans/scan15/ The Challenge] |
| − | * [http:// | + | * [http://www.sleuthkit.org/case/sotm_15/index.html Report] |
=Other= | =Other= | ||
If you have examples of how TSK or Autopsy were used in an investigation, please provide a link here. | If you have examples of how TSK or Autopsy were used in an investigation, please provide a link here. | ||
Revision as of 18:57, 8 January 2014
Honeynet Challenges
The following were written as "official" reports for challenges from the Honeynet Project and provide examples of how to use TSK and Autopsy.
Scan of the Month #29 - Linux VMWare (September 2003)
Scan of the Month #26 - FAT 12 Floppy - Part 2 (February 2003)
Scan of the Month #24 - FAT 12 Floppy - Part 1 (October 2002)
Scan of the Month #15 - Recover a deleted Linux rootkit (May 2001)
Other
If you have examples of how TSK or Autopsy were used in an investigation, please provide a link here.
