Sophie

Sophie

distrib > Fedora > 15 > i386 > by-pkgid > e67ff766e6ce3cfb88a0987cf5b93cad > files > 7

examiner-0.5-7.fc15.noarch.rpm

As of version 0.3 the Examiner now works for The Coroners Toolkit (TCT).
This is a suite of forensic utilities.  Currently as of TCT version 1.07
you need to add a few entries to take full advantage of this integration.
To get a copy of TCT you can goto: <http://www.porcupine.org/forensics/>

The changes (optoinal but suggested)
------------------------------------
Add the following entries into /etc/tct/paths.pl

$OBJDUMP="/usr/bin/objdump";
$UPX="/usr/bin/upx";		# If you have it
$DRESS="/usr/bin/dress";	# Dress comes with fenris
$UNCRIPPLE=????			# Uncripples ELF headers (check utils)