Townunix.7z
The Sleuth Kit , FTK Imager , and Volatility (if memory dumps are included).
Bash history files ( .bash_history ), SSH keys, and configuration files that reveal user activity. townunix.7z
Build a "Super Timeline" (using tools like Plaso/log2timeline ) to identify when specific files were created, modified, or accessed. The Sleuth Kit , FTK Imager , and


Valoraciones
No hay valoraciones aún.