How To Install forensic-artifacts on Debian 9

In this tutorial we learn how to install forensic-artifacts on Debian 9. forensic-artifacts is knowledge base of forensic artifacts (data files)

Introduction

In this tutorial we learn how to install forensic-artifacts on Debian 9.

What is forensic-artifacts

forensic-artifacts is:

A free, community-sourced, machine-readable knowledge base of forensic artifacts that the world can use both as an information source and within other tools.

This package installs the data files alone, without the Python toolkit.

There are three methods to install forensic-artifacts on Debian 9. We can use apt-get, apt and aptitude. In the following sections we will describe each method. You can choose one of them.

Install forensic-artifacts Using apt-get

Update apt database with apt-get using the following command.

sudo apt-get update

After updating apt database, We can install forensic-artifacts using apt-get by running the following command:

sudo apt-get -y install forensic-artifacts

Install forensic-artifacts Using apt

Update apt database with apt using the following command.

sudo apt update

After updating apt database, We can install forensic-artifacts using apt by running the following command:

sudo apt -y install forensic-artifacts

Install forensic-artifacts Using aptitude

If you want to follow this method, you might need to install aptitude first since aptitude is usually not installed by default on Debian. Update apt database with aptitude using the following command.

sudo aptitude update

After updating apt database, We can install forensic-artifacts using aptitude by running the following command:

sudo aptitude -y install forensic-artifacts

How To Uninstall forensic-artifacts on Debian 9

To uninstall only the forensic-artifacts package we can use the following command:

sudo apt-get remove forensic-artifacts

Uninstall forensic-artifacts And Its Dependencies

To uninstall forensic-artifacts and its dependencies that are no longer needed by Debian 9, we can use the command below:

sudo apt-get -y autoremove forensic-artifacts

Remove forensic-artifacts Configurations and Data

To remove forensic-artifacts configuration and data from Debian 9 we can use the following command:

sudo apt-get -y purge forensic-artifacts

Remove forensic-artifacts configuration, data, and all of its dependencies

We can use the following command to remove forensic-artifacts configurations, data and all of its dependencies, we can use the following command:

sudo apt-get -y autoremove --purge forensic-artifacts

Dependencies

forensic-artifacts have the following dependencies:

References

Summary

In this tutorial we learn how to install forensic-artifacts package on Debian 9 using different package management tools: apt, apt-get and aptitude.