Difference between revisions of "Help Documents"
From SleuthKitWiki
m (Added link to new version plan.) |
m (Added timeline and error message links.) |
||
| Line 20: | Line 20: | ||
== Specific Topics == | == Specific Topics == | ||
This section contains links to articles on specific topics that may not be specific to a specific tool. | This section contains links to articles on specific topics that may not be specific to a specific tool. | ||
| + | * [[Timelines]] | ||
* [[NTFS File Recovery]] | * [[NTFS File Recovery]] | ||
| + | * [[Error Messages]] | ||
=Non-English Documents= | =Non-English Documents= | ||
Revision as of 05:34, 22 October 2008
This page contains links and references to online help documents on The Sleuth Kit and Autopsy. The Books and Courses on TSK page contains links to books and courses.
Contents
English Documents
General Locations
This section lists locations where relevant documents may be found.
- The Sleuth Kit Informer (www.sleuthkit.org) newsletter (no longer active)
- Sleuth Kit Documents Page (www.sleuthkit.org)
- Autopsy Documents Page (www.sleuthkit.org)
- GIAC Reports - Look at the reports that people submitted for their GIAC certification. There are quite a few if you search for 'sleuth' or 'autopsy'.
Big Picture
This section contains links to articles on using The Sleuth Kit as a whole (i.e. the articles are not about a specific tool).
- Law Enforcement and Forensic Examiner Introduction to Linux: A Beginner's Guide. Barry Grundy. 2003. NASA.
- CyberGuardians Cheat Sheet: 2-page PDF with sample commands for a variety of common TSK activities. Useful for veteran analysts who want to quickly look up a forgotten flag, or for a beginner looking to learn by example and experimentation.
- Running Sleuthkit and Autopsy Under Windows by Charles Lucas (local copy)
Specific Topics
This section contains links to articles on specific topics that may not be specific to a specific tool.
