Re: Which Forensic Live CD to use?

Thank you everyone for the great feedback!

I understood, that there is not "the forensic live CD" and that it is
also common to use different ones on a analysis.
So i will test some of the distributions you guys mentioned to figure
out, which will meet my needs best.

Thanks again,

Andreas

2011/1/4 Chris Hayden <[email protected]>:
> BackTrack is a fairly popular and up-to-date distro. =C2=A0It can be run =
as live DVD or installed. =C2=A0Has a forensics mode so you can boot withou=
t altering hard drive contents (no swap). =C2=A0Meant to be somewhat of a s=
wiss army knife so it has pen tools, vuln scanners, web-app scanners, foren=
sics tools, etc. =C2=A0I use it more for Wifi cracking/demoing WIPs but kno=
w a number of people who use it for forensics tasks.
>
> http://www.backtrack-linux.org
>
> Thanks,
> Chris
>
> -----Original Message-----
> From: [email protected] [mailto:[email protected]] =
On Behalf Of Andreas Schmiet
> Sent: Saturday, January 01, 2011 8:38 AM
> To: forensics
> Subject: Which Forensic Live CD to use?
>
> Hello,
>
> i am working on my diploma thesis about Windows forensics with open sourc=
e tools and want to start with the selection of a Live-CD. I gained first e=
xperience with Helix, but unfortunately it seems not to be supported anymor=
e. And in my diploma thesis i would like to reference to a distribution whi=
ch is state of the art :)
>
> So, i want to ask, what bootable Live-CD environment people on the list a=
re using to conduct real world forensic analyses of Windows systems?
>
> Thanks in advance,
>
> Andreas
>
> -----------------------------------------------------------------
> Certify Software Integrity - thawte Code Signing Certificates This guide =
will show you how Code Signing Certificates are used to secure code that ca=
n be downloaded from the Internet. You will also learn how these certificat=
es operate with different software platforms.
> http://www.dinclinx.com/Redirect.aspx?36;5000;25;1371;0;2;946;005be7f5c87=
2ea1f
>
>
>
>



--=20
Many thanks, Andreas!

-----------------------------------------------------------------
Certify Software Integrity - thawte Code Signing Certificates
This guide will show you how Code Signing Certificates are used to secure code that can be downloaded from the Internet. You will also learn how these certificates operate with different software platforms.
http://www.dinclinx.com/Redirect.aspx?36;5000;25;1371;0;2;946;005be7f5c872ea1f