A Zero-config live CD for First Responders and Forensic Analysts
...CrashCart was created to aid Analysts responding to incidents in locations where they may not be able to be physically present or where the network environment prevents full disk imaging.
Quick Instructions (sorry I'll add doco soon):
1. Boot the infected system from the CD image
2. SSH to the IP address displayed on the screen.
3. Logon: analyst Password: malware
4. Type cchelp for hints