Helix是一份基于Knoppix自启动运行光盘的定制发行,它带有极好的硬件检测,以及很多应急响应和计算机取证方面的专用工具。 Helix is a KNOPPIX-based live CD with a large collection of tools dedicated to incident response and forensics. Drew Fahey has announced the availability of version 1.9: "Version 1.9 has been officially released. This is not a large update due to work going on for version 2.0 but many of the tools have been updated. NTFS-3g has been update to 1.710, Sleuthkit 2.09, Autopsy 2.08, Scalpel 1.60 to carve data, EnCase Linen 6.01, AFFlib 2.3.0 and libewf-20070512 for image acquisition. The Kernel was also updated to 2.6.18.7. In addition several tools on the Live Windows side have been updated/added: WFT 3.01 and Nigilant32." Read the announcement and changelog for more information. Download: Helix_V1.9-07-13-2007.iso (701 MB, MD5). |