Great article at How-To Geek on building your own customized live CD
It even has a link to create a bootable USB stick from our ISO.
How many times have we tried a Linux forensics CD that lacked one or more tools we are fond of? Now we can build our own. The process is free and fairly simple, using an online app that will build your ISO and email you a download link.
I've started a project which I will be happy to share for collaborative development. Once you create an account on the site and are comfortable with the interface, PM me your account ID and I will add you as a project member.
Alternately, you could post a list of apps you'd like to see on the disk. I am trying to keep the ISO small enough to fit on a standard CD-R for the best compatibility on older systems.
-A
Sounds simply awesome! I would love to be able to mix some of Backtrack and Some of Helix into one CD. I will have to do a little bit of research and get back to you while keeping in mind the size of the files. This really does sound great and I will definitely be checking on this project.
Glad to read there's some interest!
My first build weighs in at 887mb. I'll need to do some trimming. I may also consider creating a "lite" CD version and a "full" DVD version.
Current tools in v. 0.0.2 are
autopsy
chntpw
dcfldd
ddrescue
foremost
gddrescue
guymager
libpst-dev
libpst4
readpst
scalpel
sleuthkit
tct
testdisk
I know there's some overlap in my selections and I will tweak the Ubuntu base to remove unnecessary apps.
Feedback welcome.
-A
How many times have we tried a Linux forensics CD that lacked one or more tools we are fond of? Now we can build our own. The process is free and fairly simple, using an online app that will build your ISO and email you a download link.
Did you verify the resulting ISO that it will not write to the HDD?
Did you verify the resulting ISO that it will not write to the HDD?
I am editing the startup script to mount drives as read-only (-ro). This will be validated as I get closer to a "1.0" version. Right now, I'm mainly interested in proof-of-concept builds that I will tweak.
Ubuntu requires several code improvements in the Initrd scripts to be forensically sound. Currently, no public forensic Live CDs based on Ubuntu are fully forensically sound (= bulletproof ) ), because they alter several file system types while mounting them with "-o ro" / "-r" option during the boot or
You can contact me in August, when a patch for CAINE Live CD will be tested and I can send it to you.
Ubuntu requires several code improvements in the Initrd scripts to be forensically sound. Currently, no public forensic Live CDs based on Ubuntu are fully forensically sound (= bulletproof ) ), because they alter several file system types while mounting them with "-o ro" / "-r" option during the boot or
simply may execute the code from HDD. You can contact me in August, when a patch for CAINE Live CD will be tested and I can send it to you.
Interesting… and troubling. I have evaluated CAINE in the past and found that it did not work well with some graphics adapters. This has been a problem with other distros, as well.
I would be interested in reviewing the CAINE patch, when released. Hopefully, future versions will be more compatible than the prior versions.
One thing I hear from a lot of people is that a sample command .txt file would help, so that people who are not well versed in command line things could learn commands and what they are doing.
Glad to read there's some interest!
My first build weighs in at 887mb. I'll need to do some trimming. I may also consider creating a "lite" CD version and a "full" DVD version.
Current tools in v. 0.0.2 are
autopsy
chntpw
dcfldd
ddrescue
foremost
gddrescue
guymager
libpst-dev
libpst4
readpst
scalpel
sleuthkit
tct
testdiskI know there's some overlap in my selections and I will tweak the Ubuntu base to remove unnecessary apps.
Feedback welcome.
-A
This is a similar service to
http//susestudio.com/
They offer export to USB and VirtualBox Image though
openSuse will be more heavy on the system though but the idea is the same - It will always require special scripts to ensure forensic "soundness"