COMP 3000 2011 Report: DEFT Linux

From Soma-notes

Part 1

Background

Installation/Startup

DEFT is a LiveCD .iso so startup is as easy as setting the BIOS to boot from the CD/DVD drive, and inserting a disc with the burned iso. No virtualization software was needed, but first attempts at running this distribution involved the use of VirtualBox.

After booting up in a VirtualBox VM with 512 MB RAM allocated, it was soon realized that in order to get a true experience out of DEFT, being a forensic tool, it would be more appropriate to run on an existing machine running Windows.

A disc was burned and when the CD was put into a machine running live Windows 7, an .exe containing many of the forensic tools in the DEFT OS was run. This not being what was wanted, after a restart the machine booted into the DEFT startup menu (Figure 1).

Figure 1 - Startup
Figure 2 - Main

After choosing a language you can pick one of three options:

  • DEFT Linux live cd
  • Check disk for defects
  • Test memory

Check disk and test memory are just utilities for hardware checking, so the live cd option was chosen. DEFT goes through plenty of configuration operations and hardware scans to get the OS ready for use. Once this is all complete you are greeted by the main console screen of DEFT (Figure 2).

Basic Operation

Usage Evaluation

Part 2

Part 3

References