Home
  CD Contents
  Downloads
  Training
  Changelog
  Forums
  Links
  FAQ
  Documents
  Screenshots
Current Release:
..:: Helix 1.9a (07-13-2007) ::..

MD5 Hash
..:: Helix Store ::..
Support Helix Development

Professional Pressed CD
Professional Pressed CD & Manual
Professional Pressed CD, Manual & T-Shirt

07-13-07
The newest version of Helix has been released. See the changelog.

03-19-07
The live forensics & incident response course has had a price change due to the course being updated. It has also been changed to an intermediate level course. A new advanced course is in active development as is a covert course.

10-06-06
The newest version of Helix has been released. See the changelog.

09-18-06
A new version of Helix will be released on Oct 6, 2006. This version will have many improvements and updated programs. Two of the biggest changes are the addidtion of NTFS-3G for NTFS writes and the fixing of the mount code to prevevent changing the mount count on journaled filesystems.

03-07-06
A new version of Helix has been released to the mirrors for your testing and use. Please report any problems/bugs/suggestions on the Helix forums.


03-01-06
Drew Fahey will be presenting Helix at the Innovations in Digital Forensic Practice conference in Washington DC, on March 27, 2006....


02-21-06
The next version of Helix will be released now on March 7, 2006. Also there is new Helix merchandise available on cafepress . A new Helix quote contest has started...see the forums for details.


02-08-06
Updated the web site to refelect the new Helix 3 day training .


02-06-06
Fixed download page for all you IE users. Also new version will be released on Feb 20, 2006. See the changelog for updates.


01-07-06
Helix Featured on CyberSpeak Podcast


12-30-05
Helix Featured in Information Security Magazine

Many questions are asked of Helix. Questions that are asked repeatidly end up here.





What is Helix?

Helix is a bootable CD originally based upon Knoppix, with an emphasis on Incident Response & Computer Forensics.

What are the minimum requirements to run Helix?

Helix needs lots of RAM and a x86 architecture (Intel, AMD, etc.). You might get it running on an a system with at least 48MB RAM, but don't expect much (like a GUI). You really need a pentium class computer with at least 128MB RAM. The more RAM the better.

How do you install Helix?

In short you do not install Helix.
1) Burn the cd image (Helix.iso) to a CD.
2) Make sure that your machine can boot from a CD. (check the BIOS)
3) Reboot the machine with the CD in the CD-ROM drive.
4) Use Helix.

If you want a permanent installation of Helix you have the option of putting it on your harddrive. There is a script that will accomplish that called knx2hd. Keep in mind that this will destroy all existing data on the partition you install it on.

I get an error message "ERROR: Only one processor found"

This message doesn't matter. Just ignore it. The Helix kernel can handle multi-processor systems, and can in some situations think that your system may be multi-processor when it is not. This is not a problem.

I get the error Can't find Knoppix filesystem. then it drops me to a limited shell.

After isolinux starts up the first thing Helix wants to do is uncompress the filesystem. Helix probes for the CD on all SCSI and IDE buses. If it can't find it you'll get the error above. *This is fixed in all versions since 1.4
For Transmeta laptops and some Sonys with PCMCIA cd drives try:
helix ide2=0x180 nopcmcia
You can also try helix nodma and/or helix failsafe

How is Helix licensed?

Please read the EULA that comes with the Helix CD. The Helix license specifically does NOT allow for redistribution or resale. In other words you are not allowed to sell Helix.

What's the root password?

There is no root password. Thisi s built into the default Knoppix distribution that Helix is based on. If you need root access, you do one of the following:
1) run the command using 'sudo'
2) Run 'sudo su'


Does the Helix ISO has a virus or Trojan? My AV program picks them up.

Helix does not have any viruses or trojans. It is a false positive of your virus scanner. Your virus scanner is picking up tools on the CD (like Foundstones tools) which are security tools designed to find the viruses/trojans that are being picked up by your virus scanner. They have the same signature. Rest assured there are no viruses/trojans/backdoors on Helix.

Copyright © 2005 e-fense.com. All rights reserved.