51 ms·
Are there any open-source or commercial systems that do anything close to this? Does there exist such a forensically sound OS that should be used? The best I'v
by _rs 8y ago
Are there any open-source or commercial systems that do anything close to this? Does there exist such a forensically sound OS that should be used?
The best I've found for disk imaging is using Windows Enterprise (or similar, stripped down) with SafeBlock, but that seems less than ideal. I'd love to find a *nix alternative.
- SolarNet 8y agoAn out of the box Linux installation with a few changes should be enough. Though you should probably use a hardened distribution. The above poster basically listed the final steps. Go to the kernel and build a white list of valid USB devices (the machine's keyboard and mouse) to prevent it from talking to a "keyboard" you plug in. Turn off auto-mounting features, record traffic so you can double check. And keep the machine physically airgaped.