On Tuesday 19 April 2005 19:45, Bryan.ONeal@asu.edu wrote:
> When you say forensics suit, are you looking for something that will
> extract deleted files, or something that will guide you through system
> snooping, or something that will automatically produce an admissible
> custody trail that is court trusted.  The first is about getting your
> information, the second some one else’s, the third is only for law
> enforcement.

I am looking for something that will do EVERYTHING. recovery of undeleted 
files, magnetic field analysis, etc.

>
> There are a number of good packages for the first, a few for the second
> (though I always felt like working on one), and I do not know any Linux
> solutions for the third, though computer forensics is a big deal,
> particularly for the IRS. (What do you want I’m an accountant ;)

TMH