File : fccu-linux-cd-12.1.iso
  • Possibility to start in non graphical mode by passing "live 3" as a boot parameter.
  • New version of Guymager (0.3.1).
  • Two MS Windows tools to copy Win32 memory (including vista):
  • The memory analysis tool Volatility was added
  • The registry analysis tool regripper was added
  • aeskeyfinder et rsakeyfinder, two tools to search for AES et RSA keys inside memory dumps, were added
  • There is now a better starting web page with a better description of the tools that are on the CD.
  • Linux kernel version 2.6.25
  • Last version (0.40) of the excellent Perl libraryr from James MacFarlane Parse-win32Registry
  • Newest version 3.3.4 of afflib
  • And lot more updates ...
Release Date : 07 Oct 2008
MD5 Sum : 1042528D497F341EE96E9067A85F7190
SHA1 Sum : 30746807E6B820F4BA9B0FF3741105115218EDDD
Packages : ––
Changelog : ––

File : fccu-linux-cd-12.0.iso
  • The CD is now based on the excellent Debian Live Project
  • There is now a graphical user interface by default (xfce4)
  • A new graphical tool is used for forensic copy : GuyMager
    • It support Encase ewf images (through libewf)
    • It makes a intelligent use of multicore CPU's in a way that compressed copies will be done faster than uncompressed ones
    • Designed to be very simple to use in the Unix way of thinking
    • Find it in the main menu (right click on the desktop)
  • A new low interaction honeypot was added, Amun:
    • Find this tool in the root user directory
    • Read the doc to use it
  • This version is based on Debian "Lenny" (testing) but we will try to have a "Sid" based version soon
  • Because of the simplicity of Debian Live Helpers, expect new versions more often
  • Last but not least, thanks to the whole Debian team and the Open Source community
Release Date : 06 Jan 2008
MD5 Sum : BBA72F92AB34B0361CB524BEAD0D70C4
SHA1 Sum : 6F2ABBF0F2D64380758B0546EC5B62C02864BECD
Packages : ––
Changelog : ––

File : fccu-linux-cd-11.0.iso
  • This version is based on KNOPPIX 5.01
  • A new set of tools from MetlStorm (aka Adam Boileau) was added.
    Those tools allow an investigator to acquire a target host memory trough the firewire bus.
    Even if this target host runs MS windows
  • Vinetto, a tool to extract images from MS windows thumbnails cache files was added
  • rdd, a forensic acquisition tool from the Netherland Forensic Institute is now included
  • Support for the ewflib was added (encase images format)
  • Afflib is upgraded to the latest version
  • Lots of new packages were added, see Changelog
Release Date : 19 Oct 2006
MD5 Sum : 39E33C394AC853A67D0C121B8CBF1FCB
SHA1 Sum : 5F632C32EEC1105ECA149BE3840F5A89FC5D4F73
Packages : ––
Changelog : ––

File : fccu-linux-cd-10.0.iso
  • This version is based on KNOPPIX 4.0
  • A new PXE boot feature was added to search in large scale environements.
  • The Advanced Forensic Format is now supported (afflib 1.3.3)
  • mwcollect and nepenthes were added to help capturing malware !
  • Grokevt was added to analyse MS Windows event logs more efficiently
  • Reglookup was added to export windows registry files
  • Read the Changelog to find the tools that were added
Release Date : 28 Jan 2006
MD5 Sum : C8E07C4BBA2BDF615D4DA75D82FE1CCD
SHA1 Sum : 260E5BD097C6C96B2E165E7DA0DF9039802CE8B2
Packages : ––
Changelog : ––

File : fccu-linux-cd-8.1.iso
––
Release Date : 14 Aug 2006
MD5 Sum : E6EC82C7EA13497E75F43ED5BF3F7ACA
SHA1 Sum : F2B65C414DB19A27FCF145DB948585146A5E903F
Packages : ––
Changelog : ––

File : fccu-linux-cd-8.0.iso
––
Release Date : 14 Aug 2006
MD5 Sum : 18B33F6006A197E36138ABEF1A91BFB5
SHA1 Sum : 1764CFFFF0247BA7D93E31AABADC485E8DEEE4F0
Packages : ––
Changelog : ––

File : fccu-linux-cd-7.2.iso
––
Release Date : 14 Aug 2006
MD5 Sum : 045DFB5C8B1C09EFD2F652F532D07122
SHA1 Sum : B2703C53837C2A5EB4470E6F1FE4019F8F998C2A
Packages : ––
Changelog : ––

File : fccu-linux-cd-7.1.iso
––
Release Date : 14 Aug 2006
MD5 Sum : 8472375315F8E035E3C1CA986A11AFB7
SHA1 Sum : F8D6C49B272E416DDAD25FEC60A818D42B92D9C2
Packages : ––
Changelog : ––

File : fccu-linux-cd-7.0.iso
––
Release Date : 14 Aug 2006
MD5 Sum : EEB47589ADCD4A9B3FBFD3729D0E0226
SHA1 Sum : AA5A008EF0B68A0E7F14A69122E91F8B5B6DAB61
Packages : ––
Changelog : ––

File : fccu-linux-cd-6.1.iso
––
Release Date : 14 Aug 2006
MD5 Sum : 7475FB59187810114675EA264BCABA1C
SHA1 Sum : 10A33C94C90495481EB37951F9B1C2C5C2686A72
Packages : ––
Changelog : ––

File : fccu-linux-cd-9.0.iso
  • This version is based on KNOPPIX 3.9
  • Kernel was recompiled and support fast USB 2 transfer mode trough the /dev/sdx devices
  • Support for multi LUN (multiple flash card reders for exemple)
  • Lots of new packages were added, see Changelog
Release Date : 14 Aug 2006
MD5 Sum : 75F30F3056E39D4CCB55C2AD8EB2D8C9
SHA1 Sum : 014702EE999888CAF408ABCF65DC99241BDB28B3
Packages : ––
Changelog : ––