In addition, a package called "The Coroner's Toolkit" contains an utility or two for doing this as well. TCT is a tool developed for doing forensics work on machines that have been cracked, written by Wietse Venema and Dan Farmer.

It can be found here.

Glad to see another good tool developed for this - very nice indeed.

--jwest

-><- -><- -><- -><- -><-
All things are Perfect
    To every last Flaw
    And bound in accord
         With Eris's Law
 - HBT; The Book of Advice, 1:7