We finally made it: Forensic Discovery is finished:
It can be purchased from an physical book store (frequent those!), Amazon, or Addison-Wesley, or wherever else you go for books. We've also set up its own web page with programs, errata, and most of the text.![]()
The Coroner's Toolkit (TCT) is a collection of tools that are either oriented towards gathering or analyzing forensic data on a Unix system.
We taught a (one-time) class on August 6th, 1999, in an attempt to teach ourselves and others about forensic computing and analysis.
We also wrote a half-dozen columns for the oh-so-fine Doctor Dobb's Journal. In order: