Announcement: The Coroner's Toolkit (TCT)

TCT is a collection of programs that can be used for a post-mortem analysis of a UNIX system after break-in. The software was presented first during a free Computer Forensics Analysis class that Wietse Venema and Dan Farmer gave one year ago (almost to the day).