I previously posted a HOWTO for installing Kristinn Gudjonsson’s log2timeline on Ubuntu 9.10. Since that time, Kristinn setup his own apt-get repository so things are much easier. Here’s what I did (which is
Add apt-get repository
At this time, Kristinn only has the karmic repository setup and that will work fine for Ubuntu 9.10 and 10.04…probably others. In short order, I’m sure he will add lucid and then you can delete the karmic line and uncomment the lucid one.
sudo nano -w /etc/apt/sources.list
and add the following:
deb http://log2timeline.net/pub/ karmic main #deb http://log2timeline.net/pub/ lucid main
Add public key, update and install:
wget -q http://log2timeline.net/gpg.asc -O- | sudo apt-key add - sudo apt-get update sudo apt-get install log2timeline-perl
And that’s it. Check out log2timeline and logscanner…both are great apps for forensics.
