Mass Processing
The complex and time-consuming OCFA installation is worthwhile in environments that support large and complex forensic analysis projects – and in cases in which the forensic and investigative tasks are easily separated. Note, however, that the sparse OCFA GUIs do not offer the convenience of other forensic tools.
Ralf Spenneberg works as a freelance Unix/Linux trainer, consultant, and author. He has published several books on the subject of intrusion detection, firewalling, and virtual private networks. His latest book "SELinux & AppArmor" was published recently.
Comments