Windows Incident Forensics with Knoppix Helix

Daehenoc writes "After finding Windows Forensics and Incident Recovery while looking around for forensics tools, I found this instead: Helix Incident Response and Forensics. It's a customized version of Knoppix which you can use in an online or offline style - put it in when Windows is running and you can retrieve a stack of useful information and send it to a network share. Or boot a suspect system with the CD and get access to useful forensics tools like sleuthkit!"

Comments

Re:Anti-Spyware

[peragrin]

in 1992 my Hard drive was 20 megs and it wasn't big enough.

You increased your hard drive storage by 6,000 times and you still run out of room.

Of course copied over my basic files from one computer to another and filed 30 gigs. Not sure which is worse. I do know that i will get at least another 10 gig's filled when I start ripping cd images for games to store locally. Laptops are great it just sucks being forced to carry the disks with you.