|
|
| Line 1: |
Line 1: |
| − | <div style="margin-top:0.5em; border:2px solid #ff0000; padding:0.5em 0.5em 0.5em 0.5em; background-color:#dddddd; align:center;">
| |
| − | '''Note:''' We're trying to use the same [[tool template]] for all devices. Please use this if possible.
| |
| − | </div>
| |
| | | | |
| − | ; [[BackTrack]]
| |
| − | ; [[Matriux]]
| |
| − | ; [[CAINE Live CD]]
| |
| − |
| |
| − | ; [[DEFT Linux]]
| |
| − | : A Live CD built on top of [[Xubuntu]] with the best tools for computer forensics and incident response.
| |
| − | : It's a very light and fast live system created for the Computer Forensics specialists.
| |
| − | : The first live CD with [[AFF]], dhash and [[Xplico]].
| |
| − | : http://www.deftlinux.net
| |
| − |
| |
| − | ; [[THE FARMER'S BOOT CD]]
| |
| − | : A [[Linux]] [[Live CD]], designed and optimized for previewing data in a [[forensically sound]] manner. It contains a number of programs forensic practitioners can utilize to preview both [[Windows]] and [[Linux]] systems.
| |
| − |
| |
| − | ; [[FCCU Gnu/Linux Boot CD]]
| |
| − | : A [[Live CD]] built on top of [[Debian Live]] with a lot of tools with forensic purpose.
| |
| − | : http://www.lnx4n6.be
| |
| − |
| |
| − | ; [[grml]]
| |
| − | : A forensic [[Live CD]] built on top of [[Debian]].
| |
| − | : http://grml.org
| |
| − |
| |
| − | ; [[Helix3]] ([[Helix3 Pro]])
| |
| − | : A [[Live CD]] built on top of [[Ubuntu]] with special tools for [[Incident Response|incident response]] and electronic discovery.
| |
| − | : http://e-fense.com
| |
| − |
| |
| − | ; [[MacQuisition Boot CD]]
| |
| − | : A forensic [[Live CD]] built for imaging [[Macintosh]] systems.
| |
| − |
| |
| − | ; [[Masterkey Linux]]
| |
| − | : A [[Linux]] [[Live CD]] built on top of [[Slackware]] featuring a wide variety of free and open source tools, focused on both Incident Response and Computer Forensic Examination.
| |
| − | : http://masterkeylinux.com
| |
| − |
| |
| − | ; [[PlainSight]]
| |
| − | : A forensic [[Live CD]] built on top of [[Knoppix]].
| |
| − | : http://www.plainsight.info
| |
| − |
| |
| − | ; [[Recovery Is Possible]]
| |
| − | : A [[Linux]] [[Live CD]] with a number of recovery applications such as [[TestDisk]], [[PhotoRec]], etc.
| |
| − | : http://www.tux.org/pub/people/kent-robotti/looplinux/rip/
| |
| − |
| |
| − | ; [[SAFE Boot Disk]]
| |
| − | : The first and only commercially available forensically sound Windows Boot disk.
| |
| − | : Includes built-in driver support, access to the NTFS file system and built-in software write blocking.
| |
| − | : http://www.forensicsoft.com/catalog/product.php
| |
| − |
| |
| − | ; [[SMART Linux]]
| |
| − | : Two [[Live CD | Live CDs]] built on top of [[Slackware]] and [[Ubuntu]]. Includes [[SMART]] and other forensic tools.
| |
| − | : http://asrdata2.com
| |
| − |
| |
| − | ; [[SPADA]]
| |
| − | : A forensic [[Live CD]] built on top of [[Knoppix]].
| |
| − | : http://spada-cd.info
| |
| − |
| |
| − | ; [[Windows Forensic Environment (aka WinFE, Windows FE)]]
| |
| − | : A Windows based forensic CD based off the Windows Pre-Installation Environment.
| |
| − | : http://winfe.wordpress.com
| |
| − | : [[WinFE]]
| |
| − |
| |
| − | == Out of date Live CDs ==
| |
| − |
| |
| − | ; [[Knoppix STD]]
| |
| − | : A [[Live CD]] built on top of [[Knoppix]].
| |
| − | : http://s-t-d.org/
| |
| − |
| |
| − | ; [[Penguin Sleuthkit]]
| |
| − | : A Linux [[Live CD]] that includes SleuthKit.
| |
| − | : http://penguinsleuth.org/
| |
| − |
| |
| − | ; [[SNARL]]
| |
| − | : A FreeBSD based forensics Bootable ISO (includes Autopsy and Sleuth Kit).
| |
| − | : http://sourceforge.net/projects/snarl/
| |
| − |
| |
| − | ==See Also==
| |
| − | * [[:Category:VMware Appliances]]
| |
| − |
| |
| − | [[Category:Tools]]
| |
