CAINE (Computer Aided INvestigative Environment) is a GNU/Linux Live distribution that is based on Ubuntu 16.04 with the Gnome desktop and customized for computer forensics. The distro features:
Kernel 4.4.0-97
Support for the four phases of digital forensics
User-friendly GUI
Support for BIOS, legacy BIOS, UEFI, and UEFI secure boot
Windows IR/Live forensics tools
Improved boot speed and boot to RAM
To maintain a pristine forensics environment, CAINE 9.0 "Quantum" puts all block devices (e.g., /dev/sda) in read-only mode to ensure that disks are preserved from accidental write operations. If you need to write to a disk, you can unlock it with the BlockOn/Off
tool on the desktop. Disks are color-coded on the desktop as green (read-only, i.e., safe) or red (writable, i.e., caution!).
...
Use Express-Checkout link below to read the full article (PDF).
Criminals often focus on browsers for various attacks because they are a worthwhile, attractive, and often easy target. However, admins can investigate such attacks with forensic tools that provide the ability to reconstruct browser sessions.
Criminals often focus on browsers for various attacks because they are a worthwhile, attractive, and often easy target. However, admins can investigate such attacks with forensic tools that provide the ability to reconstruct browser sessions.
In heterogeneous environments, admins regularly face system maintenance challenges, but the right choice of distribution on a USB storage device keeps your toolbox in your pocket.
Thanks to its huge choice of security tools, Linux is perfectly suited to securing heterogeneous networks. With a specialized distro like Kali Linux, you can quickly locate and eliminate security vulnerabilities.
Redo Backup backs up complete hard drives locally or over a network. The focus is on simple operation and high reliability in a variety of deployment scenarios.