[pcuser]

HELIX LINUX

Quote

Helix is a customized distribution of the Knoppix Live Linux CD. Helix is more than just a bootable live CD. You can still boot into a customized Linux environment that includes customized linux kernels, excellent hardware detection and many applications dedicated to Incident Response and Forensics.

Helix has been modified very carefully to NOT touch the host computer in any way and it is forensically sound. Helix wil not auto mount swap space, or auto mount any attached devices. Helix also has a special Windows autorun side for Incident Response and Forensics.

Helix focuses on Incident Response & Forensics tools. It is meant to be used by individuals who have a sound understanding of Incident Response and Forensic techniques. That said Helix is used by the following organizations for Incident Response/Forensics Training:


e-fense: Helix Incident Response & Computer Forensics
NW3C: Linux Forensics
SANS Track 508: System Forensics, Investigation and Response.
InfoSec Institute: Computer Forensics Training
SEARCH: Basic Investigators Training

Download the plugin from HERE and extract it to your multiboot plugin folder (the helix subdirectory will be automatically created) then just download the helix linux iso image and rename it to helix.iso (all lowercase) and save it to the helix\files directory. That's it, just rebuild UBCD4Win and look for "Helix Linux" in the multiboot menu.

NOTE * The Helix iso image is about 700mb so this plugin is for bootable dvd's only since it's too big to fit on a cd with UBCD4Win

This plugin is for Helix_V1.7-03-07-2006.iso and I don't know if it'll work with other versions.

EDIT - I just noticed that this was post number 1,000 for me

Tom

[Hemo2]

Tom, I thought I'd give this a try but when I boot it up from the multiboot menu, Helix starts to bootup and it does an initial scan of some storage devices, but I then get a message that the file system couldn't be found and dumps me to a limited shell. I made sure I renamed the downloaded image to "helix.iso" (all lowercase), and believe I made things properly by extracting the plugin to the "\UBCD4Win\plugin\Multiboot-003" folder and then copied the helix.iso file into the "\UBCD4Win\plugin\Multiboot-003\helix\files" folder. Everything builds fine and when I select it from the multiboot menu Helix does in fact start to bootup, it's just that I get the message about can't find the file system and it stops.

I burned just the helix.iso file by itself to a cd and it boots up fine on the very same computer I tested my multiboot dvd with, so I'm thinking the iso file is ok and the hardware of the computer isn't the problem.

It's not a big deal if I can't get it to work since we don't do linux, but I figured since I had no problems adding Knoppix and GParted, I might as well add Helix too, but I ran into this problem so I thought I'd ask if you or anyone else might have any thoughts on this.

[dirkgently42]

pcuser, on Jul 18 2006, 03:09 PM, said:

EDIT - I just noticed that this was post number 1,000 for me

Tom

[bengt]

@Hemo2
I know this is not really an answer to your question, but have a look, quite interesting though.
http://www.nautopia...._collection.php

[bengt]

I think that you have to open up the boot/grub/menu.lst file and the 26.lst files and check if the references/paths to message, vmlinuz, miniroot.gz and 26.lst are correct.

This post has been edited by bengt: 14 September 2006 - 10:05 PM

[The Piney]

Do you have the UBCD, GParted and/or Knoppix enabled when your adding the Helix? If so the ISOLINUX folders may be conflicting...

Check out this post, may provide so info...

http://www.ubcd4win....?showtopic=5522

Hope this helps,

The Piney

[bdmeyer]

Hi pcuser,
Thanks for the great work on your plugins.
I use the last free version (Helix2008R1.iso) Helix quite a bit. I see it is now ubuntu based, not knoppix.

I get the error message:
/proc/splash: no such file or directory
Can't find a Helix filesystem, sorry
Dropping you to a (very limited) shell.

Here is the line from fromn helix_bcdw.ini:

/isolinux/isolinux.bin ; Helix Linux ; ^ Forensics Toolkit ; helix initrd=helix.gz ramdisk_size=100000 init=/etc/init lang=us apm=power-off nomce unionfs quiet knoppix_iso_dir=helix knoppix_iso_name=helix.iso fromiso=helix/helix.iso

Can you tell me what I need to do to get Helix to boot from UBCD4WIN with this version?

Thanks again for you work on this project. I use the product quite a bit.

--Bruce D. Meyer