Grml-Forensic

Tools

Forensic bootable OS

Grml-Forensic is a derivative of the Grml Linux live system which has been modified to aid in forensic investigations and data rescue tasks. Grml itself is a well known and established Debian based live system for system administrators. On top of that Grml-Forensic provides all the features of Grml and additionally includes several forensic tools and default operating modes for secure analysis and data acquisition. One of the main features of Grml-Forensic is, that it won't modify anything unless it's explicitly told to do so.