The Coroner's Toolkit (TCT) is a collection of tools designed to assist in a forensic examination of a computer. It is primarily designed for Unix systems, but it can some small amount of data collection & analysis from non-Unix disks/media. WWW: http://www.porcupine.org/forensics/tct.html - Francisco Gomez - francisco@gomezmarin.com