Comments on: Leave No Artifacts Behind – Linux Live CDs

By: The Illuminati

The Illuminati — Tue, 14 Jun 2011 07:50:21 +0000

A forensic investigation is not limited to hard drives.

By: xnplx

xnplx — Wed, 27 Apr 2011 03:38:35 +0000

I’ve been using this method for quite sometime now. But instead of those linux distros mentioned above, I use puppylinux. Also, instead of constantly booting from a live CD — which is sometimes quite slow — I did a manual “frugal” install of the OS in my harddisk. In such method, the OS boots faster than in a Live CD but maintains the same effect of booting from a Live CD: fresh OS every boot. After every session, Puppylinux will ask if you want to save the data that you generated during the session in your user space. I personally prefer not to save anything. But If you really want to save your session, t gives you the option to encrypt your user space.

By: Shaun

Shaun — Mon, 15 Nov 2010 00:02:28 +0000

Any Secure Linux LiveCD that comes with with Vidalia?
Also how would I be able to use some of my bookmarks in firefox/opera if i am booting up with a live cd? Do I have to download it as an html file from my email / a file share site each time and then load it up or could I access the bookmark file from a partition on my hard disk?

By: Olivia Graves

Olivia Graves — Fri, 20 Aug 2010 10:10:37 +0000

by the way, this Windows boot CD is easy to use and works

By: DigitaLBBQ

DigitaLBBQ — Fri, 17 Jul 2009 08:00:08 +0000

A MICROWAVE OVEN takes care of that THUMBDRIVE incase of loud bangs on the door.

By: Magnus

Magnus — Sun, 21 Jun 2009 20:08:47 +0000

On windows, I know disabling the page file would cause problems, but how about limiting its size? Would that be any help?

By: Conducting Your "Business" from Wireless Networks | Anti-Forensics

Conducting Your "Business" from Wireless Networks | Anti-Forensics — Tue, 24 Mar 2009 09:08:30 +0000

[...] Leave No Artifacts Behind [...]

By: Yar

Yar — Tue, 17 Mar 2009 21:11:03 +0000

Yes, great idea. Definitely use some form of encryption or data hiding. It won’t do you any good if you’re raided in connection to something and they find copies of files from the illegally accessed system on your thumb drive.

By: John Doe

John Doe — Tue, 17 Mar 2009 20:35:23 +0000

Works like a charm It’s also possible to pull this trick with a usb stick.

Instead of not mounting your drive, you could consider RO mounting. Then you can access documents or exploits for review/use and still leave no trace on the HD itself.

If you move data out of the cd/usb environment, not forget to encrypt it