Helix - Incident Response & Computer Forensics Live CD by e-fense™, Inc.

Home

CD Contents

Downloads

Training

Changelog

Forums

Links

FAQ

Documents

Screenshots



Current Release: ..:: Helix 1.9a (07-13-2007) ::.. MD5 Hash



..:: Helix Store ::.. Support Helix Development Professional Pressed CD Professional Pressed CD & Manual Professional Pressed CD, Manual & T-Shirt



07-13-07 The newest version of Helix has been released. See the changelog. 03-19-07 The live forensics & incident response course has had a price change due to the course being updated. It has also been changed to an intermediate level course. A new advanced course is in active development as is a covert course. 10-06-06 The newest version of Helix has been released. See the changelog. 09-18-06 A new version of Helix will be released on Oct 6, 2006. This version will have many improvements and updated programs. Two of the biggest changes are the addidtion of NTFS-3G for NTFS writes and the fixing of the mount code to prevevent changing the mount count on journaled filesystems. 03-07-06 A new version of Helix has been released to the mirrors for your testing and use. Please report any problems/bugs/suggestions on the Helix forums. 03-01-06 Drew Fahey will be presenting Helix at the Innovations in Digital Forensic Practice conference in Washington DC, on March 27, 2006.... 02-21-06 The next version of Helix will be released now on March 7, 2006. Also there is new Helix merchandise available on cafepress . A new Helix quote contest has started...see the forums for details. 02-08-06 Updated the web site to refelect the new Helix 3 day training . 02-06-06 Fixed download page for all you IE users. Also new version will be released on Feb 20, 2006. See the changelog for updates. 01-07-06 Helix Featured on CyberSpeak Podcast 12-30-05 Helix Featured in Information Security Magazine

"Download your copy today and save a windows machine tomorrow." --zushiba

Helix is a customized distribution of the Knoppix Live Linux CD. Helix is more than just a bootable live CD. You can still boot into a customized Linux environment that includes customized linux kernels, excellent hardware detection and many applications dedicated to Incident Response and Forensics.

Helix has been modified very carefully to NOT touch the host computer in any way and it is forensically sound. Helix wil not auto mount swap space, or auto mount any attached devices. Helix also has a special Windows autorun side for Incident Response and Forensics.

Helix focuses on Incident Response & Forensics tools. It is meant to be used by individuals who have a sound understanding of Incident Response and Forensic techniques. That said Helix is used by the following organizations for Incident Response/Forensics Training:

e-fense: Helix Incident Response & Computer Forensics

NW3C: Linux Forensics

SANS Track 508: System Forensics, Investigation and Response.

InfoSec Institute: Computer Forensics Training

SEARCH: Basic Investigators Training

Helix is brought to you by: