Investigate a Computer with a bootable Linux CD

Hi,

Several time, I managed to analyse a MS Windows protected computer with a bootable linux distribution.

I did it with Knoppix.

What kind of Linux tools do you use ?

Knoppix-STD
TCT
string command
Sleuth Linux

Ok, it seems that sleuth linux is based on Knoppix.

I'l try it...

Best regards.

There are a LOT of posts regarding these tools here. Do a little searching for more in depth info.

Here's a quick list, tho:
Helix - Incident Response and Computer Forensics Live CD

Trinux - Linux Security Toolkit

NST - Network Security Toolkit

...and many, many more.

I am a fan of knoppix STD

This was posted before but here it is again........
http://www.frozentech.com/content/livecd.php
A long list of linux live cd's to choose from.

Autopsy. It's on PHLAK.