Windows Incident Forensics with Knoppix Helix

Daehenoc writes "After finding Windows Forensics and Incident Recovery while looking around for forensics tools, I found this instead: Helix Incident Response and Forensics. It's a customized version of Knoppix which you can use in an online or offline style - put it in when Windows is running and you can retrieve a stack of useful information and send it to a network share. Or boot a suspect system with the CD and get access to useful forensics tools like sleuthkit!"

Comments

WHO GIVE A FUCKING SHIT?

[Anonymous Coward]

I Certianly DON'T!

Re:WHO GIVE A FUCKING SHIT?

[Anonymous Coward]

NEITHER DO I, FUCK YOU SLASHDOT!

# Please try to keep posts on topic.
# Try to reply to other people's comments instead of starting new threads.
# Read other people's messages before posting your own to avoid simply duplicating what has already been said.
# Use a clear subject that describes what your message is about.
# Offtopic, Inflammatory, Inappropriate, Illegal, or Offensive comments might be moderated. (You can read everything, even moderated posts, by adjusting your threshold on the User Preferences Page)
# If you want replies to your comments sent to you, consider logging in or creating an account.

Re:Knoppix Anti-Virus?

[beee]

This is a wonderful idea, especially for minorities who are often uneducated about computer security and unable to afford the pricey name brand AV suites. These people, who often lack the experience and the computer literacy to avoid virus infestations, could really benefit from a free and easy to use AV suite. Many complications with virus removal stem from the virus' interference with the anti-viral software, so having a seperate OS boot up to deal with them is a great idea.

Open source projects and their potential applications are really one of our greatest hopes for brining minority populations up to the level of everyone else, in terms of computer intelligence.