CAINE (Computer Aided INvestigative Environment) is an Ubuntu-based GNU/Linux live distribution created as a project of digital forensics. The project's latest release, CAINE 11.0, is based on Ubuntu 18.04 and reportedly supports booting on UEFI, Secure Boot, and Legacy BIOS devices. Version 11.0 includes a Btrfs forensic tool and limits access to all storage devices to read-only mode. "Important changes: All devices are blocked in Read-Only mode, by default. New tools, new OSINT, Autopsy 4.13 onboard, APFS ready,BTRFS foresic tool, NVME SSD drivers ready! SSH server disabled by default (see manual page for enabling it). SCRCPY - screen your Android device. Autopsy 4.13 + additional plugins by McKinnon. X11VNC Server - to control CAINE remotely. Hashcat. New scripts (in the Forensics Tools - Analysis menu). AutoMacTc - a forensics tool for Mac. Bitlocker - volatility plugin. Autotimeliner - automagically extract forensic timeline from volatile memory dumps. Firmwalker - firmware analyzer. CDQR - Cold Disk Quick Response tool."
