Forensics Live CDs
lainchan / sec

----------------------------------------------------------------------
Nguoi La · 2018-11-18 18:59

What is the very best forensics live CD?

https://www.forensicswiki.org/wiki/Category:Live_CD

----------------------------------------------------------------------
Switch · 2018-11-18 22:40

SIFT is fine for the most part, but i'd consider it about the tools
rather than the entire image, so make your own

----------------------------------------------------------------------
Sabo Engle · 2018-11-24 10:09

if you want something that works out of the box, nothing beats Parrot
OS. If you want bare bones and minimal, just compile a custom arch iso
with the tools you want.

----------------------------------------------------------------------
The Phantom Phreak · 2018-11-27 03:45

>>6366

So Michael Bazell and his partner (?) created  a pretty cool OS. I
haven't got to look at it too awful much, but it looks promising. It's
called buscador.

https://inteltechniques.com/menu.html

----------------------------------------------------------------------
Erik Johansson · 2019-03-21 14:17

>>6366
Voyager OS
Kali Linux OS
Parrot OS

----------------------------------------------------------------------
Koichiro · 2019-03-21 18:08

>>6413
basically this

There's a ton of good distros with baked in tools.
It really depends on *your* use case, OP, there is no objective "very
best".
A good tool means nothing to someone who doesn't know why to use it,
don't rely on the "distro" for your tools.

----------------------------------------------------------------------
Haruyoshi · 2019-06-11 22:49

>>6366
I've only tried Parrot, though there seems to be more support for Kali
on forums. You can take almost any advice for Kali and apply it to
Parrot though.

----------------------------------------------------------------------
Tyrell Wellick · 2019-07-12 15:27

This seems as good a place as any to ask about what I did wrong or if
the drive itself was just plain fuarrrked
I was using testdisk to attempt to recover data from a windows laptop.
Using the analyse tool, I copied over the user's home folder, but only
copied names?  All the files seem present but are universally
0KB/dataless.  What should I have done to copy the data as well?