Ho lokolloa ha CAINE 11.0, sesebelisoa sa kabo bakeng sa ho khetholla data e patiloeng

o bone lesedi lokolla KAINE 11.0 (Computer Aided INvestigative Environment), kabo e khethehileng ea Live e etselitsoeng ho etsa tlhahlobo ea forensic, ho batla lintlha tse patiloeng le tse hlakotsoeng ho li-disk le ho supa tlhahisoleseling e setseng ho khutlisetsa setšoantšo sa ts'ebetso ea ts'ebetso. Kabo e thehiloe ho Ubuntu mme e na le sebopeho se le seng sa graphical se thehiloeng ho khetla ea MATE bakeng sa ho laola lisebelisoa tse fapaneng tsa ho ithuta Unix le Windows. Ho kenya setšoantšo sa Live ho RAM hoa tšehetsoa. Boholo ba boot setšoantšo sa iso 4.1 GB (x86_64).

Moetso li kenyelelitsoe e bolela joalo ka GtkHash, Air (Sets'oants'o se Iketselitsoeng & Khutlisa), SSDeep, HDSentinel (Hard Disk Sentinel), Bulk Extractor, Fiwalk, ByteInvestigator, Autopsy, Ka pele-pele, scalpel, Sleuthkit, Guymager, DC3DD. Hape ke habohlokoa ho hlokomela tsamaiso e khethehileng e entsoeng ka har'a moralo oa morero WinTaylor bakeng sa tlhahlobo e phethahetseng ea litsamaiso tsa Windows le ho hlahisa litlaleho tse qaqileng mabapi le liphoso tsohle tse rekotiloeng. E boetse e kenyelletsa khetho ea mangolo a thusang bakeng sa mookameli oa faele ea Caja (fork ea Nautilus), e u lumellang ho etsa licheke tse ngata ho karolo ea disk kapa bukana, hammoho le ho sheba lenane la lifaele tse hlakotsoeng le ho arola litaba tse hlophisitsoeng, joalo ka joalo ka nalane ea sebatli, ngoliso ea Windows, litšoantšo tse nang le metadata EXIF.

Litlhahiso tse ka sehloohong:

• Tokollo e hahiloe motheong oa sephutheloana sa Ubuntu 18.04, e tšehetsa UEFI Secure Boot mme e tla le Linux 5.0 kernel;
• Ho thibela ho ngola ka phoso, lisebelisoa tsohle tsa block li se li behiloe ka mokhoa oa ho bala feela. Ho fetohela ho mokhoa o ngoloang, sesebelisoa sa BlockON se fanoa ka sebopeho sa graphical;
• Nako ea ho kenya e fokotsehile;
• E ekelitse bokhoni ba ho qala ka ho kopitsa setšoantšo sa boot ho RAM;
• Mefuta e mecha ea OSINT, Autopsy 4.13, APFS, BTRFS foresic tool;
• Tšehetso e ekelitsoeng bakeng sa NVME SSD;
• Ka ho sa feleng, seva sa SSH se holofetse;
• Sesebelisoa se kopantsoe scrcpy, ho laola sesebelisoa sa Android (ho nka skrine) ka USB kapa TCP/IP;
• E kentse Seva ea X11VNC bakeng sa tsamaiso e hōle ea CAINE;
• Sesebelisoa sa AutoMacTc se ekelitsoeng bakeng sa tlhahlobo ea forensic ea litsamaiso tse thehiloeng ho macOS;
• Sesebelisoa se ekelitsoeng Autotimeliner ho ntša ka bohona tlhahisoleseling mabapi le ts'ebetso ea mosebelisi ho tsoa litsing tsa mohopolo;
• E kenyelelitsoe firmware analyzer Firmwalker;
• Sesebelisoa se ekelitsoeng CDQR (Cold Disk Quick Response) ho ntša data e setseng litšoantšong tsa disk;
• E kentse lisebelisoa tse ngata tsa Windows.
  

Source: opennet.ru