Re: Forensics CD

From: sunzi (sunzi@mod-x.co.uk)
Date: Wed Oct 09 2002 - 16:14:08 PDT

  • Next message: Black, Braden: "RE: Forensics CD"

    I downloaded FIRELite yesterday which was released on August 18, 2002 from
    here: http://sourceforge.net/projects/biatchux/. Apparently they're changing
    the name, but I think it's the same one:
    
    - Forensics workstation/Data Recovery
    - Live System Incident Response
    - Virus Scanning
    - Pen-Testing Platform
    
    cheers,
    sunzi
    ----- Original Message -----
    From: "Ryan McBride" <mcbrideat_private>
    To: "H C" <keydet89at_private>
    Cc: <incidentsat_private>
    Sent: Wednesday, October 09, 2002 12:20 PM
    Subject: Re: Forensics CD
    
    
    > On Wed, Oct 09, 2002 at 08:05:56AM -0700, H C wrote:
    > >
    > > > You might want to look at FIRE which is a primarily
    > > > a CD bootable linux distribution
    > >
    > > The same would be true for FIRE, as well.  It's an
    > > excellent solution...but by booting to Linux, you
    > > loose out on all that volatile data you have access
    > > to...
    >
    > Earlier versions of FIRE actually had a number of binaries for
    > performing analysis on live systems (i386 Windows and Sparc Solaris),
    > but they appear to have been pulled in more recent releases due to
    > licensing issues. Hopefully we'll start seeing some utilities with more
    > favorable licensing in the next version(s).
    >
    > -Ryan
    >
    > --
    > Ryan T. McBride, CISSP - mcbrideat_private
    > Countersiege Systems Corporation - http://www.countersiege.com
    > PGP key fingerprint = 8BA0 A58C 5038 9157 59C3  F9E6 6DDA 6611 BF4C 776B
    >
    >
    > --------------------------------------------------------------------------
    --
    > This list is provided by the SecurityFocus ARIS analyzer service.
    > For more information on this free incident handling, management
    > and tracking system please see: http://aris.securityfocus.com
    >
    
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Thu Oct 10 2002 - 08:30:40 PDT