Linux Auditing Live CDs
Image 1 of 7
Backtrack book screen
When you want to know what’s happening on your network, systems, or applications, but not install a auditing software, Linux (and BSD and occasionally Windows) distributions “Live CDs” can help. Live CDs are OS distributions on a CD- or DVD-ROM that you can boot and run directly from the CD and RAM, without installing anything to the hard drive. In a Right Tool for the Job blog post, David HM Specter explains how you can perform security audits using the Backtrack Linux Live CD. This gallery shows you several of the Backtrack tools in action.
Submitted by David HM Specter
Backtrack Login Screen
Backtrack, like most Auditing Live CDs, comes with dozens and dozens of tools. Most of these tools are the digital equivalent of lock picks and system cracking tools and are very useful for auditing network security. However, some of Baktrack’s more powerful tools can get you into a lot of hot water–should you use them inappropriately.
Backtrack initialization screen
Backtrack startup screen
Backtrack tools menus
Backtrack, like most Auditing Live CDs, comes with dozens of security tools. The creators have categorized Backtrack’s large selection of tools into manageable chunks of functionality.
Autopsy Forensic Package main screen
Backtrack includes several “Forensic Tools” – that are very useful in systematically documenting data discovered during an audit. Dome of these tools save data into databases, others are systems that allow an investigator to make a pristine copy (image) of a hard drive for later examination.
Autopsy is one of those tools.
Autopsy - New case
Creating a new case
Autopsy - New host
Adding a host to a case file