14 DAY TRIAL // CAINE (Computer Aided INvestigative Environment), a GNU/Linux live distribution created as a project of Digital Forensics, is now at version 5.0.
CAINE 5.0, codename “BLACKHOLE,” provides a complete forensic solution with the help of a friendly graphical interface. According to the developer, it offers an interoperable environment that supports the digital investigator during the four phases of the digital investigation and a semi-automated compilation of the final report.
The developers of Caine have been very busy and they are releasing major versions almost on a regular basis.
“CAINE includes scripts activated within the Caja web browser designed to make examination of allocated files simple. Currently, the scripts can render many databases, internet histories, Windows registries, deleted files, and extract EXIF data to text files for easy examination. The Quick View tool automates this process by determining the file type and rendering with the appropriate tool,” reads the official announcement.
Highlights of CAINE 5.0:
• The Linux kernel has been updated to version 3.8.0-35; • The distribution is based on 12.04.3 64-bit and it's UEFI/SECURE BOOT ready. This means that the OS can boot on Uefi/Uefi+secure boot/Legacy Bios/Bios from a USB stick, or it can boot on Legacy Bios/Bios from a DVD; • SystemBack is now the new installer; • “rbfstab” is a utility that is activated during boot or when a device is plugged. It writes read-only entries to /etc/fstab so devices are safely mounted for forensic imaging/examination; • “mounter” is a GUI mounting tool that sits in the system tray. Left clicking the system tray drive icon activates a window where the user can select devices to mount or un-mount; • A unique script, “Identify iPod Owner,” is now included in the toolset.
A complete list of changes, updates, new features, and applications can be found in the official announcement.
Download CAINE 5.0 right now from Softpedia.