The Caine 2.0 forensic distribution

Raising Caine

Article from Issue 122/2011
Author(s):

Caine is a Linux distribution based on Ubuntu 10.04 for forensic scientists and security-conscious administrators. Poised to do battle against IT ne’er-do-wells, Caine has a comprehensive selection of software, a user-friendly GUI, and responsive support.

In 2007, IT systems were compromised with the Russian hacking framework MPack [1], infecting masses of servers, mostly at data centers in Italy. A short time later, 10 Italian open source developers fought back and launched the forensics CD Caine (Computer-Aided Investigative Environment). The Live CD is designed to capture images and analyze compromised systems on site. The most recent version is 2.0 [2].

Buy this article as PDF

Express-Checkout as PDF
Price $2.95
(incl. VAT)

Buy Linux Magazine

SINGLE ISSUES
Print Issues
Digital Issues
 
SUBSCRIPTIONS
Print Subs
Digisubs
 
TABLET & SMARTPHONE APPS
Get it on Google Play

US / Canada

Get it on Google Play

UK / Australia

Related content

  • ATA over Ethernet

    We'll show you how to build a network-based virtual RAID solution using ATA over Ethernet.

    more »
  • Guymager: Forensic Backup

    If malware has taken root on a system, you need a way to safeguard the evidence. Guymager helps you create verified disk images.

    more »
  • OCFA

    Automate the forensics process with the Dutch police department's Open Computer Forensics Architecture.

    more »
  • Investigating Windows Systems

    A forensics expert explains how to extract interesting details from a confiscated Windows hard disk using standard Linux tools.

    more »
  • Recovering Deleted Files

    Modern filesystems make forensic file recovery much more difficult. Tools like Foremost and Scalpel identify data structures and carve files from a hard disk image.

    more »
comments powered by Disqus