Тег: ubuntu.18.04

CAINE (Computer Aided INvestigative Environment) is an Ubuntu-based GNU/Linux live distribution created as a project of digital forensics. The project's latest release, CAINE 11.0, is based on Ubuntu 18.04 and reportedly supports booting on UEFI, Secure Boot, and Legacy BIOS devices. Version 11.0 includes a Btrfs forensic tool and limits access to all storage devices to read-only mode. "Important changes: All devices are blocked in Read-Only mode, by default. New tools, new OSINT, Autopsy 4.13 onboard, APFS ready,BTRFS foresic tool, NVME SSD drivers ready! SSH server disabled by default (see manual page for enabling it). SCRCPY - screen your Android device. Autopsy 4.13 + additional plugins by McKinnon. X11VNC Server - to control CAINE remotely. Hashcat. New scripts (in the Forensics Tools - Analysis menu). AutoMacTc - a forensics tool for Mac. Bitlocker - volatility plugin. Autotimeliner - automagically extract forensic timeline from volatile memory dumps. Firmwalker - firmware analyzer. CDQR - Cold Disk Quick Response tool."

Софт

Version 10.0 is based on Ubuntu 18.04: "CAINE 10.0 "Infinity" is out. Linux kernel 4.15, based on Ubuntu 18.04 64-bit, can boot on UEFI, UEFI with Secure Boot, Legacy BIOS, BIOS. The important news is that CAINE 10.0 blocks all block devices (e.g. /dev/sda) in read-only mode. You can use a GUI tool named BlockOn/Off which is present on CAINE's desktop. This new write-blocking method assures that all disks are really preserved from accidental writing operations because they are locked in read-only mode. If you need to write to a disk, you can unlock it with BlockOn/Off or by using 'Mounter' to change the policy to writable mode. New tools, new OSINT, Autopsy 4.9 on-board, APFS ready, Btrfs forensic tool, NVME SSD drivers; SSH server disabled by default; OSINT - Carbon14, OsintSpy added; mobile - gMTP and ADB added; added Recoll, Afro, Stegosuite; many fixes and software updates; CAINE has Windows IR/Live forensics tools; new release of Arsenal Image Mounter and HibernationRecon...."

Софт