Helix3 is a Live CD built on top of Ubuntu. It focuses on incident response and computer forensics.
According to Helix3 Support Forum, e-fense is no longer planning on updating the free version of Helix.
Helix focuses on Incident Response and forensics tools. It is meant to be used by individuals who have a sound understanding of Incident Response and forensic techniques.
- FTK Imager
Windows side can be used to scan for pictures on a live system.
- Helix3 will automount ext3 and ext4 file systems during the boot process and recover them if required (bug in initrd scripts);
- Helix3 can automount some storage devices like firewire devices and MMC in read/write mode;
- Helix3 relies on file system drivers to provide write protection, mounting some file system types (e.g. XFS will result in several data writes to the original media.