Results 1 to 4 of 4

Thread: Forensic Mode Questions

  1. #1
    Join Date
    2017-Nov
    Posts
    2

    Forensic Mode Questions

    Hi guys, I have a couple of questions about the live forensic mode boot option in Kali. I'm a bit of a computer noob, so I'm sorry if these are stupid questions!

    It says that the key difference in forensic mode is that the hard disc is never touched, however I was under the impression that this was already the case when using a live boot cd/USB. Am I mistaken, or is forensic mode simply a bit more restrictive in terms of letting you mount the hard disc by choice?

    Also, assuming I was to boot in forensic mode, would this still allow me to access my persistent storage on the cd/USB?

  2. #2
    Join Date
    2016-Oct
    Location
    /dev/sda
    Posts
    1,012

  3. #3
    Join Date
    2017-Nov
    Posts
    2
    I have read the documentation, and that is what prompted my question. When it says the hard disc is never touched, how does this differ from booting in a regular live mode, as I was under the impression that the hard disc wouldn't be touched anyway? Am I wrong?

  4. #4
    Join Date
    2016-Oct
    Location
    /dev/sda
    Posts
    1,012
    The auto-mount option for all the storage device is disabled unless you explicitly request to mount your HDD using mount /dev/sda* /mnt.

    Generally USB devices are auto-mounted but in forensic mode even that won't work to prevent theft of information.

    Test this yourself.

Similar Threads

  1. Kali graphical installion in forensic mode
    By gif in forum General Archive
    Replies: 6
    Last Post: 2018-08-28, 17:43
  2. Forensic mode
    By prh514 in forum General Archive
    Replies: 0
    Last Post: 2014-08-02, 22:21
  3. Files are being indexed from the hard drive, even in forensic mode.
    By 0uroboros in forum TroubleShooting Archive
    Replies: 0
    Last Post: 2014-03-20, 22:33
  4. Can't boot into persistent mode live USB only forensic.
    By perception in forum Installing Archive
    Replies: 1
    Last Post: 2013-11-27, 22:51

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •