On the DVD
CAINE 9.0 (Live, 64-bit)
CAINE (Computer Aided INvestigative Environment) is a GNU/Linux Live distribution that is based on Ubuntu 16.04 with the Gnome desktop and customized for computer forensics. The distro features:
- Kernel 4.4.0-97
- Support for the four phases of digital forensics
- User-friendly GUI
- Support for BIOS, legacy BIOS, UEFI, and UEFI secure boot
- Windows IR/Live forensics tools
- Improved boot speed and boot to RAM
To maintain a pristine forensics environment, CAINE 9.0 "Quantum" puts all block devices (e.g., /dev/sda) in read-only mode to ensure that disks are preserved from accidental write operations. If you need to write to a disk, you can unlock it with the BlockOn/Off tool on the desktop. Disks are color-coded on the desktop as green (read-only, i.e., safe) or red (writable, i.e., caution!).
