Tagged Questions
1
vote
1answer
50 views
Information flow in Linux - how to tell who is currently active and typing?
I'm currently playing a mafia/werewolves game with my cyber-security class.
The basic idea is:
on one machine, the moderator starts a server program
all the players ssh into the machine and launch ...
0
votes
2answers
76 views
Trying to recover a deleted .bash_history file
It's for an assignment to practice a bit of forensics. We're given VirtualBox images and told to figure out if a certain user messed up the ssh config.
I mounted the image as read-only, and found ...
1
vote
2answers
206 views
What is the best way to undelete some photos on Linux? Is there any way to use foremost to only recover files that only contain some text?
I accidentaly deleted some digital photos I had recently taken, and I wanted to undelete them. I found out about Foremost, and it allows me to recover jpg files, but will fo that with all of the ...
1
vote
2answers
681 views
hard drive forensics tool for linux
I am looking for an application I used in 2001.
It was a curses application that displayed devices or files in hexadecimal format, and allowed searching through them and other functionality.
I can't ...
0
votes
2answers
122 views
Where can I find a complete list of all the logs in the system?
I'd like to learn more about forensic analysis, and I'm trying to do the challenges from Project Honeynet. I need to check the logfiles and find the IP's that connected remotely to the computer. I ...
