DEFT (Digital Evidence & Forensic Toolkit)

La distribución DEFT (Digital Evidence & Forensic Toolkit) es un live Cd basado en la distribución Ubuntu. Esto hace que sea muy fácil de usar, además de incluir una excelente detección del hardware.

deft

Esta distribución busca integrar en un solo booteable todas las herramientas que necesitas, algunas de las que se incluyen en esta distribución son:

sleuthkit, collection of UNIX-based command line tools that allow you to investigate a computer
autopsy, graphical interface to the command line digital investigation tools in The Sleuth Kit
dhash, multi hash tool
aff lib, advanced forensic format
gpart, tool which tries to guess the primary partition table of a PC-type hard disk
dd rescue, copy data from one file or block device to another
foremost, console program to recover files based on their headers, footers, and internal data structures
scalpel, carving tool
wipe
hex dump, combined hex and ascii dump of any file
khex edit, a versatile and customizable hex editor
steg detect, a steganography detection software
outguess, a stegano tool
ophcrack, Windows password recovery
wireshark, network sniffer
ettercap, network sniffer
nessus, vulnerability and security scanner, client
nessusd, vulnerability and security scanner, server
nmap, the best network scanner
airsnort, wireless LAN (WLAN) tool which recovers encryption keys
kismet, sniffer and intrusion detection system that work with any wireless card
dmraid, discover software RAID devices
testdisk, tool to recover damaged partitions
qtparted, a Partition Magic clone written in C++ using the Qt toolkit
vinetto, tool to examine Thumbs.db files
trID, tool to identify file types from their binary signatures
readpst, a tools to read ms-Outlook pst files
snmpwalk
chkrootkit, Checks for signs of rootkits on the local system
rkhunter, rootkit, backdoor, sniffer and exploit scanner
john, john the ripper password cracker
clam, antivirus

Pagina Oficial de la Distribución Forense DEFT

Cómputo forense y delitos informáticos