CAINE

Description

CAINE (Computer Aided INvestigative Environment) is a Linux live distribution designed for digital forensics. It integrates numerous forensic tools into a user-friendly environment with a semi-automated report generator, and mounts disks in read-only mode by default to preserve evidence integrity.

Use Cases

• Boot a forensic investigation environment from USB/DVD
• Perform evidence-safe analysis with read-only disk mounting
• Generate semi-automated forensic investigation reports

Attack Phases

MITRE ATT&CK Techniques (2)