forensics-extra
---------------

This is a native metapackage for Debian to provide extra packages for forensics
activities. These packages are not under Debian Security Tools Team umbrella.
This metapackage includes the most important programs to data recovery, rootkit
and exploit search, filesystems and memory analysis, image acquisition, volume
inspection, special actions over the hardware and many other activities.

To generate control and README.Debian files, follow the steps:

1. Edit 'variables' file as needed.
2. Run 'apt-get update' command. The /etc/apt/sources.list must use Sid and
   'main' section only.
3. Run 'search-for-new.sh' to search for new candidates.
4. Read 'tmp-search/final-list-possible-packages' file.
5. Edit 'excluded-packages' and 'list-of-packages-extra' files, if needed.
6. Run 'detect-conflicts.sh'.
7. Adjust 'list-of-packages' file if needed.
8. Run 'gen-control.sh'.
9. Verify control.NEW and *.README.Debian.NEW files, generated by
   gen-control.sh.
10. Run 'move.sh' to rename and send both generated files to debian/.

The synopsis.sh script will show the short description for all packages
from list-of-packages-extra file.

The search-for-new.sh is used to search interesting packages. Other way is
search for packages in lists of tools. An example is the lists provided by
Kali Linux[1].

[1] http://tools.kali.org/kali-metapackages

 -- Joao Eriberto Mota Filho <eriberto@debian.org>  Mon, 26 Sep 2016 13:57:51 -0300,
    updated Tue, 08 Jan 2019 13:47:00 -0200.
