Category:Live CD

BackTrack

Matriux

CAINE Live CD

DEFT Linux

THE FARMER'S BOOT CD

A Linux Live CD, designed and optimized for previewing data in a forensically sound manner. It contains a number of programs forensic practitioners can utilize to preview both Windows and Linux systems.

FCCU Gnu/Linux Boot CD

A Live CD built on top of Debian Live with a lot of tools with forensic purpose.

http://www.lnx4n6.be

grml

A forensic Live CD built on top of Debian.

http://grml.org

Helix3 (Helix3 Pro)

A Live CD built on top of Ubuntu with special tools for incident response and electronic discovery.

http://e-fense.com

MacQuisition Boot CD

A forensic Live CD built for imaging Macintosh systems.

Masterkey Linux

A Linux Live CD built on top of Slackware featuring a wide variety of free and open source tools, focused on both Incident Response and Computer Forensic Examination.

http://masterkeylinux.com

PlainSight

A forensic Live CD built on top of Knoppix.

http://www.plainsight.info

Recovery Is Possible

A Linux Live CD with a number of recovery applications such as TestDisk, PhotoRec, etc.

http://www.tux.org/pub/people/kent-robotti/looplinux/rip/

SAFE Boot Disk

The first and only commercially available forensically sound Windows Boot disk.

Includes built-in driver support, access to the NTFS file system and built-in software write blocking.

http://www.forensicsoft.com/catalog/product.php

SMART Linux

Two Live CDs built on top of Slackware and Ubuntu. Includes SMART and other forensic tools.

http://asrdata2.com

SPADA

A forensic Live CD built on top of Knoppix.

http://spada-cd.info

Windows Forensic Environment (aka WinFE, Windows FE)

A Windows based forensic CD based off the Windows Pre-Installation Environment.

http://winfe.wordpress.com

WinFE

Out of date Live CDs

Knoppix STD

Penguin Sleuthkit

SNARL

See Also

• Category:VMware Appliances