Title :
Design and Implementation of a Documentation Tool for Interactive Commandline Sessions
Author :
Dewald, Andreas ; Freiling, Felix C. ; Weber, Tim
Author_Institution :
Univ. of Mannheim, Mannheim, Germany
Abstract :
In digital investigations it is important to document the examination of a computer system with as much detail as possible. Allthough never designed for digital investigations, many experts use the software script to record their whole terminal session while analyzing a target system. We analyze script´s deficiencies and present the design and implementation of for script (forensic script), a software providing additional capabilities and mechanisms for digital investigations, following the paradigm of literate programming.
Keywords :
computer forensics; document handling; digital investigations; documentation tool; forscript; interactive commandline sessions; literate programming; script software; Documentation; Forensics; Programming; Software; Switches; Timing;
Conference_Titel :
IT Security Incident Management and IT Forensics (IMF), 2011 Sixth International Conference on
Conference_Location :
Stuttgart
Print_ISBN :
978-1-4577-0146-7
DOI :
10.1109/IMF.2011.17