CrashCart

CrashCart is a zero-config live CD for First Responders and Forensic Analysts.

CrashCart enables First Responders such as general staff or IT staff to contain a compromised system whilst providing a safe remote environment for Forensic Analysis.

CrashCart was created to aid Analysts responding to incidents in locations where they may not be able to be physically present or where the network environment prevents full disk imaging.

Quick Instructions (sorry I'll add doco soon):
1. Boot the infected system from the CD image
2. SSH to the IP address displayed on the screen.
3. Logon: analyst Password: malware
4. Type cchelp for hints