I just submitted 4 computer forensic packages to factory today.
The most noteworthy is log2timeline.
log2timeline won the 2009 Gold Award from SANS and is one of the hottest computer forensic apps out there from the perspective of the incident response community.
== Overview of computer forensic submissions to factory
Since 12.1 I've submitted a few different computer forensic apps:
In Factory - mac-robber - a app to output Modified, Accessed, Created dates In Factory - sleuthkit - a well known collection of computer forensic command line tools upgraded in Factory - exiftool - a tool to extract and update metadata in user files / photo files. Submitted - afflib - Library/Tool to create "open" forensic images Submitted - bulk_extractor - Tool to scan forensic images and pull out patterns like urls Submitted - fiwalk - Tool to catalog files within a forensic image Submitted - log2timeline - App to create integrated timelines from multiple sources Submitted - python-fuse - python bindings for fuse In Security - libewf - Library/Tool to create EnCase forensic images - waiting for python-fuse to be accepted In Archiving:Backup - dc3dd - Tool for creating "dd" forensic images - I want to move it to the security project before I submit it
Considering packaging - autopsy - a WebUI for sleuthkit. A new 3.0 beta is out, but it's windows only for now. I'm on hold until a linux version fo 3.0 is ready to test.
If anyone else is interested in computer forensic apps, please ask to be a co-maintainer on the above, or submit additional packages.
I hope to continue to submit one or two packages a month to factory.
If anyone wants to help, but doesn't know how to package, then creating a Computer Forensics portal page would be a great asset as well.
Thanks for your interest Greg