The Sleuth Kit
  

Autopsy
  

mac-robber
  

Case Studies

The updated list of case studies is being maintained here on the wiki.

The following were written as "official" reports for challenges from the Honeynet Project.

Scan of the Month #29 - Linux VMWare (September 2003)

Scan of the Month #26 - FAT 12 Floppy - Part 2 (February 2003)

Scan of the Month #24 - FAT 12 Floppy - Part 1 (October 2002)

Scan of the Month #15 - Recover a deleted Linux rootkit (May 2001)