Тег: caine

CAINE (Computer Aided INvestigative Environment) is an Ubuntu-based GNU/Linux live distribution created as a project of digital forensics. The project's latest release, CAINE 11.0, is based on Ubuntu 18.04 and reportedly supports booting on UEFI, Secure Boot, and Legacy BIOS devices. Version 11.0 includes a Btrfs forensic tool and limits access to all storage devices to read-only mode. "Important changes: All devices are blocked in Read-Only mode, by default. New tools, new OSINT, Autopsy 4.13 onboard, APFS ready,BTRFS foresic tool, NVME SSD drivers ready! SSH server disabled by default (see manual page for enabling it). SCRCPY - screen your Android device. Autopsy 4.13 + additional plugins by McKinnon. X11VNC Server - to control CAINE remotely. Hashcat. New scripts (in the Forensics Tools - Analysis menu). AutoMacTc - a forensics tool for Mac. Bitlocker - volatility plugin. Autotimeliner - automagically extract forensic timeline from volatile memory dumps. Firmwalker - firmware analyzer. CDQR - Cold Disk Quick Response tool."

Софт

"CAINE 9.0 'Quantum' 64-bit edition released. Added and changed in CAINE 9.0 - RegRipper, VolDiff, SafeCopy, PFF tools, pslistutil, mouseemu, NBTempoX, Osint: Infoga, The Harvester, Tinfoleak regfmount and libregf-utils, installed many scripts and programs. SSH server disabled by default (see manual page for enabling it). Autopsy 2.24 fixed - srch_strings changed with 'GNU strings' renamed in srch_strings. Many other fixes and software updates. Windows side with incident response and live analysis on Windows systems. Tools include Nirsoft suite with launcher, WinAudit, MWSnap, Arsenal image mounter, FTK Imager, Hex Editor...."

Софт