CAINE Linux

Content sourced from Wikipedia, licensed under CC BY-SA 3.0.

CAINE Linux (Computer Aided Investigative Environment) is an Italian open‑source live Linux system for digital forensics. Created by Giovanni “Nanni” Bassetti, it brings many forensic tools together in a friendly graphical interface. CAINE runs from USB or DVD as a live system and can also be installed on hardware or in a virtual machine. The latest release is 14.0 “Lightstream” (March 2025) and it supports booting on modern UEFI systems as well as legacy BIOS. It’s based on Ubuntu 18.04 64‑bit with a Linux kernel in the 5.x range. By default, CAINE uses read‑only mode for all block devices to protect evidence. It analyzes Windows, Linux and some Unix data and supports common file systems (NTFS, FAT/ExFAT, Ext2/Ext3, HFS, ISO 9660) via GUI or command line. It can import raw or expert‑witness disk images and works with images from other tools like EnCase or FTK. CAINE is free software, mainly GNU GPL; see caine-live.net.