banner
CAINE 0.5 offers a complete forensic environment that is organized to integrate existing software tools as software modules and to provide a friendly graphical interface.
The main design objectives that CAINE aims to guarantee are the following:
  • an interoperable environment that supports the digital investigator during the four phases of the digital investigation
  • a user friendly graphical interface
  • a semi-automated compilation of the final report
We recommend you to read the page on the CAINE policies carefully.


layer2

Tools and packages included in CAINE Live CD

  • Autopsy 2.20
  • foremost
  • Fundl
  • gtkhash
  • Guymager
  • LRRP
  • ophcrack
  • photorec
  • scalpel
  • SFDumper
  • stegdetect
  • testdisk
  • TheSleuthKit 3.0
  • afflib
  • cryptcat
  • libewf
  • md5sum
  • sha256sum
  • sha512sum
  • Abiword 2.6.4
  • Firefox 3.0.5
  • GCalcTool
  • Geany
  • gparted
  • gtk-recordmydesktop
  • liveusb
  • ntfs-3g
  • VLC
  • Wicd

WinTaylor_Banner

Tools and packages included in WinTaylor

  • ActiveXHelper
  • IECookiesView
  • IEHistoryView
  • IEPassView
  • IPNetInfo
  • MessenPass
  • OpenedFilesView
  • PC Time
  • ProduKey
  • RegScanner
  • Recover Files
  • ShellExView
  • USB History Dump
  • FTKImager
  • Windows Forensic Toolchest
  • Nigilant32

RAM Dumping
  • MDD
  • Win32dd
  • Winen

Net Tools
  • Fport
  • TCPView
  • Advanced LAN Scanner

Sysinternals with GUI
  • AccessEnum
  • Autoruns
  • DiskView
  • Filemon
  • procexp
  • Regmon
  • RootkitRevealer
  • Winobj

Sysinternals from terminal
  • autorunsc
  • efsdump
  • handle
  • Listdlls
  • logonsessions
  • ntfsinfo
  • psexec
  • psfile
  • psgetsid
  • Psinfo
  • pskill
  • pslist
  • psloggedon
  • psloglist
  • pspasswd
  • psservice
  • psshutdown
  • pssuspend
  • streams
  • strings