How To Install forensics-full on Debian 9

In this tutorial we learn how to install forensics-full on Debian 9. forensics-full is Full forensics station (metapackage)

Introduction

In this tutorial we learn how to install forensics-full on Debian 9.

What is forensics-full

forensics-full is:

This metapackage install forensics-all, forensics-extra and forensics-extra-gui packages, making available all significative tools for forensics activities provided by Debian.

If you want a desktop acting as a forensics station, this package is for you.

This package is also useful for pentesters, ethical hackers and experts.

There are three methods to install forensics-full on Debian 9. We can use apt-get, apt and aptitude. In the following sections we will describe each method. You can choose one of them.

Install forensics-full Using apt-get

Update apt database with apt-get using the following command.

sudo apt-get update

After updating apt database, We can install forensics-full using apt-get by running the following command:

sudo apt-get -y install forensics-full

Install forensics-full Using apt

Update apt database with apt using the following command.

sudo apt update

After updating apt database, We can install forensics-full using apt by running the following command:

sudo apt -y install forensics-full

Install forensics-full Using aptitude

If you want to follow this method, you might need to install aptitude first since aptitude is usually not installed by default on Debian. Update apt database with aptitude using the following command.

sudo aptitude update

After updating apt database, We can install forensics-full using aptitude by running the following command:

sudo aptitude -y install forensics-full

How To Uninstall forensics-full on Debian 9

To uninstall only the forensics-full package we can use the following command:

sudo apt-get remove forensics-full

Uninstall forensics-full And Its Dependencies

To uninstall forensics-full and its dependencies that are no longer needed by Debian 9, we can use the command below:

sudo apt-get -y autoremove forensics-full

Remove forensics-full Configurations and Data

To remove forensics-full configuration and data from Debian 9 we can use the following command:

sudo apt-get -y purge forensics-full

Remove forensics-full configuration, data, and all of its dependencies

We can use the following command to remove forensics-full configurations, data and all of its dependencies, we can use the following command:

sudo apt-get -y autoremove --purge forensics-full

Dependencies

forensics-full have the following dependencies:

References

Summary

In this tutorial we learn how to install forensics-full package on Debian 9 using different package management tools: apt, apt-get and aptitude.