ITP: tct (The coroner's toolkit)
Description: The coroner's toolkit
A set of low-level (read dangerous) tools which can be used to
help reconstruct a partial event log after a break-in, and to
retrieve deleted files. Usually you need to have installed it
before you need to restore a file.
License: Parts are IBM Public License v1
(http://www.fish.com/tct/LICENSE) and the rest is a very
slightly-modified BSD license (http://www.fish.com/tct/COPYRIGHT).
If it transpires that this mix of licenses is incompatible with
Debian (main) I shall withdraw my ITP.
I'm in the NM queue -- would anybody be so good as to sponsor me
Systems Programmer, IT Service, University of Durham, England