Bootable Business Cards / CDs

• Most designed for recovery and maintenance

  • Bootable Business Cards (BBCs) are convenient
  • Bootable CDs (BCDs) have more tools

• Some designed for forensics

• Most have forensic tools like TCT and Task

• Most have drive / partition / fs recovery tools

• Many include cryptography tools

• Most will analyze more than just Linux systems

• Currently only run on x86 systems

• Not all are appropriate for forensics

• Choose an appropriate BBC or BCD in advance

• Use bootable CDs carefully to preserve evidence

Notes: