Cado Live

Cado Live is a handy tool that makes it easier for examiners to handle forensic data. It comes as an .iso file, which you can mount on your system to investigate the data. One of the cool features is the cloud-syncing integration! You can store forensic data on popular cloud services like Google, Azure, and Amazon. But if you prefer, you can always save it locally on a USB stick too.

Creating a Bootable USB with Cado Live

Since this is an .iso file, you'll want to create a bootable USB disk to use it. Don’t worry; it's super easy! You can do this using Rufus. Once that’s done, just plug the USB into the machine where you need to access the forensic data.

Getting Started with Cado Live

When your computer recognizes the bootable disk, you'll boot right into its interface. It's best to select booting into the GUI (Graphical User Interface) for an easier experience. From there, navigate to CadoImager and set up your preferences. You’ll choose which disk you want to image and where you want to upload it.

Cloud Uploads and Secure Credentials

If you're uploading to the cloud, make sure you have secure credentials ready for whatever service you're using. This will keep your data safe!

Tweaking Data Processing Options

You also have some options for processing your data! You can compress it, enable detailed logging, and generate MD5 and SHA256 hashes for added security. Plus, you can add case and evidence identifiers as optional details—this helps provide more context about what you're imaging.

Viewing Your Data After Acquisition

Once everything's set up and running, the acquisition will proceed smoothly. After it's done, you'll be able to view your data either from local storage or through your chosen cloud service.

If you're ready to try out Cado Live, check out this link for download!