As of version 0.3 the Examiner now works for The Coroners Toolkit (TCT). This is a suite of forensic utilities. Currently as of TCT version 1.07 you need to add a few entries to take full advantage of this integration. To get a copy of TCT you can goto: <http://www.porcupine.org/forensics/> The changes (optoinal but suggested) ------------------------------------ Add the following entries into /etc/tct/paths.pl $OBJDUMP="/usr/bin/objdump"; $UPX="/usr/bin/upx"; # If you have it $DRESS="/usr/bin/dress"; # Dress comes with fenris $UNCRIPPLE=???? # Uncripples ELF headers (check utils)