The Coroner’s Toolkit (TCT)
E298653
The Coroner’s Toolkit (TCT) is a pioneering suite of Unix-based digital forensics tools created by Wietse Venema and Dan Farmer for post-mortem analysis of compromised systems.
All labels observed (2)
| Label | Occurrences |
|---|---|
| The Coroner’s Toolkit | 2 |
| The Coroner’s Toolkit (TCT) canonical | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T2795575 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
Target entity: The Coroner’s Toolkit (TCT) Context triple: [Wietse Venema, knownFor, The Coroner’s Toolkit (TCT)]
-
A.
ATF policies and procedures on forensic services
ATF policies and procedures on forensic services are the official guidelines that govern how the Bureau of Alcohol, Tobacco, Firearms and Explosives conducts, manages, and ensures the quality of its forensic laboratory examinations and related support activities.
-
B.
Forensic Investigation Center
The Forensic Investigation Center is a specialized New York State Police facility that conducts advanced scientific analysis and evidence processing to support criminal investigations.
-
C.
Combined DNA Index System
The Combined DNA Index System (CODIS) is a national DNA database in the United States that enables law enforcement agencies to store, compare, and match DNA profiles for criminal investigations and identification.
-
D.
Bibliotheca Anatomica
Bibliotheca Anatomica is a major 18th-century anatomical compendium edited by Albrecht von Haller that systematically collected and evaluated contemporary knowledge and literature in human anatomy.
-
E.
The Chapman Report
The Chapman Report is a 1962 American drama film, based on Irving Wallace’s novel, that explores the intimate lives and sexual attitudes of suburban women through the lens of a controversial research study.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
Target entity: The Coroner’s Toolkit (TCT) Target entity description: The Coroner’s Toolkit (TCT) is a pioneering suite of Unix-based digital forensics tools created by Wietse Venema and Dan Farmer for post-mortem analysis of compromised systems.
-
A.
ATF policies and procedures on forensic services
ATF policies and procedures on forensic services are the official guidelines that govern how the Bureau of Alcohol, Tobacco, Firearms and Explosives conducts, manages, and ensures the quality of its forensic laboratory examinations and related support activities.
-
B.
Forensic Investigation Center
The Forensic Investigation Center is a specialized New York State Police facility that conducts advanced scientific analysis and evidence processing to support criminal investigations.
-
C.
Combined DNA Index System
The Combined DNA Index System (CODIS) is a national DNA database in the United States that enables law enforcement agencies to store, compare, and match DNA profiles for criminal investigations and identification.
-
D.
Bibliotheca Anatomica
Bibliotheca Anatomica is a major 18th-century anatomical compendium edited by Albrecht von Haller that systematically collected and evaluated contemporary knowledge and literature in human anatomy.
-
E.
The Chapman Report
The Chapman Report is a 1962 American drama film, based on Irving Wallace’s novel, that explores the intimate lives and sexual attitudes of suburban women through the lens of a controversial research study.
- F. None of above. chosen
Statements (46)
| Predicate | Object |
|---|---|
| instanceOf |
Unix software
ⓘ
computer security tool ⓘ digital forensics software suite ⓘ |
| creatorRoleOfDeveloper |
Dan Farmer
ⓘ
Wietse Venema ⓘ |
| developer |
Dan Farmer
ⓘ
Wietse Venema ⓘ |
| distributionForm | source code ⓘ |
| field |
computer forensics
ⓘ
computer security ⓘ |
| genre | security forensics toolkit ⓘ |
| hasAbbreviation | TCT ⓘ |
| hasComponentType | command-line utilities ⓘ |
| hasDocumentation |
TCT man pages
ⓘ
online usage guides ⓘ |
| includesTool |
findkey
ⓘ
grave-robber ⓘ ifind ⓘ ils ⓘ lazarus ⓘ mactime ⓘ pfind ⓘ tctutil ⓘ unrm ⓘ wcmd ⓘ |
| influenced |
sleuthkit
ⓘ
surface form:
The Sleuth Kit
|
| license | open source software ⓘ |
| notableFor |
file system post-mortem analysis
ⓘ
pioneering Unix-based digital forensics ⓘ |
| operatingSystem |
Unix
ⓘ
Unix-like systems ⓘ |
| platform | Unix command-line environment ⓘ |
| primaryUse |
digital forensics
ⓘ
incident response ⓘ post-mortem analysis of compromised systems ⓘ |
| programmingLanguage | C ⓘ |
| supportsTask |
analysis of compromised hosts
ⓘ
analysis of file system metadata ⓘ collection of forensic evidence from Unix systems ⓘ recovery of deleted files ⓘ timeline analysis of file activity ⓘ |
| targetUser |
digital forensics investigators
ⓘ
incident responders ⓘ system administrators ⓘ |
| typicalEnvironment |
Unix servers
ⓘ
RSA NetWitness ⓘ
surface form:
security incident response labs
|
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Subject: The Coroner’s Toolkit (TCT) Description of subject: The Coroner’s Toolkit (TCT) is a pioneering suite of Unix-based digital forensics tools created by Wietse Venema and Dan Farmer for post-mortem analysis of compromised systems.
Referenced by (3)
Full triples — surface form annotated when it differs from this entity's canonical label.