The purpose behind this article is to describe the features of Ftklipse, an extendable platform for computer forensics. This document designed to provide a detailed specification for the developers of Ftklipse. Ftklipse is a thick-client solution for forensics investigation. It is designed to collect and preserve evidence, to analyze it and to report on it. It supports chain of custody management, access control policies, and batch operation of its included tools in order to facilitate and accelerate the investigation. The environment itself and its tools are configurable as well and is based on Eclipse.
@article{arxiv.0906.2446,
title = {Ftklipse - Design and Implementation of an Extendable Computer Forensics Environment: Software Requirements Specification Document},
author = {Marc-André Laverdière and Serguei A. Mokhov and Suhasini Tsapa and Djamel Benredjem},
journal= {arXiv preprint arXiv:0906.2446},
year = {2009}
}
Comments
SRS project document of an open-source project; 25 pages; 4 figures; from April 2006; v2 adds missing .ind file for the index