Re: [sleuthkit-users] Choice of Linux distro Was:Install help--SleuthKit 3.0.1

[farmerdude <ke...@cr...>]

Hi Ron,

If you're looking to work within a Linux environment then Ubuntu or
Fedora may be the easiest for you to boot, have your hardware
recognized, and then install or continue to run from the CD environment.
Each of these distros are very GUI-oriented, end-user centric.
Translation = recognition of devices, auto-mounting of supported file
system types, easy-to-use package managers and system updates, ETC.

You really have two things at play - one is just plain Linux, and the
other is a forensics-oriented Linux.  Obviously none of the well-known
distros are forensics-oriented (Fedora, RHEL, SuSE, Ubuntu, ETC.).
However, you can navigate the environment, learn about the Linux
operating system environment, and utilize forensics applications.  The
key difference is that none of the intricacies of changing standard
Linux to forensics Linux have been done for you.  Though, if you've got
the correct viewpoint, these do provide you with the playground from
which to learn and build  :)

Cheers!

farmerdude


http://www.forensicbootcd.com/

http://www.onlineforensictraining.com/



On Thu, 2009-03-12 at 09:21 -0700, Ron McGill wrote:
> But for the non-Linux user, is there really any distro that is *easy*?
> Especially for someone coming from a Windows centric world.
> 
> If it weren't for licensing or other legal issues, I would be happy to
> pay for a sleuth kit image that I could ghost to a common Dell/HP
> box.  
> 
> Ron
> 
> PS If anyone has a loose box of bailout cash, please pass it along.
> 
> 
-- 

********NOTICE*******
This e-mail message and all attachments may contain legally privileged
and confidential information intended solely for the use of the
addressee. If you are not the intended recipient, please be advised that
any reading, dissemination, copying, or other use of this message or its
attachments is prohibited. If you have received this message in error,
please notify the sender immediately by return e-mail and delete this
message and all copies and backups thereof.
**Thank You**