Helix 2008R1

Helix is a customised distribution of the Knoppix live CD with excellent hardware detection and many applications dedicated to incident response and forensics.

Version 1.9 has been officially released. This is not a large update due to work going on for version 2.0 but many of the tools have been updated. NTFS-3g has been update to 1.710, Sleuthkit 2.09, Autopsy 2.08, Scalpel 1.60 to carve data, EnCase Linen 6.01, AFFlib 2.3.0 and libewf-20070512 for image acquisition. The Kernel was also updated to 2.6.18.7. In addition several tools on the Live Windows side have been updated/added: WFT 3.01 and Nigilant32.

---

Home_http://www.e-fense.com/helix/
Downloads (~701 Mb)_ftp://tt.ic.uva.nl/h...07-13-2007.iso

Helix 2008R1 (2.0) has officially been released and is available for download. This is a major update to the bootable side of Helix, as it is based on Ubuntu rather than KNOPPIX. There are a number of other changes: Guidance Software Linen v6.11.2.2; AFFLIB 3.3.3 - open and extensible file format designed to store disk images and associated metadata; aimage 3.1.0 - advanced disk imaging tool; Autopsy 2.08 - GUI front-end to Sleuth Kit tools; Sleuth Kit 2.52 - open source digital investigation forensic tools; chkrootkit v0.47 - determine whether system is infected with a rootkit; chntpw 0.99.3 - utility to overwrite Windows SAM passwords...

---

Downloads (~702 Mb)_http://mirrors.cmich....elix2008R1.iso