CAINE 3.0 review

CAINE, acronym for Computer Aided INvestigative Environment, is a Linux distribution specially crafted for performing computer (digital) forensics. It started life as the graduate thesis of Giancarlo Giustini at the Information Engineering Department of the University of Modena e Reggio Emilia, Italy. It is now a project of Digital Forensics for Inter-department Center for Research on Security (CRIS) at the same university.

The latest edition, CAINE 3.0, code-named Quasar, was released on October 3. It is the project’s fifth release, and also marks the first release with MATE as the desktop environment. Previous editions used GNOME 2 and all have been Live CD images for 32-bit platforms. The boot menu is shown below.
Caine 3 Boot Menu

CAINE is based on Ubuntu desktop and the latest release is based on Ubuntu 12.04. It, therefore, shares the same installation program with its parent distribution. Though the installer recommends 6.3 GB of disk space for a successful installation, a new installation (of CAINE 3.0) uses just about 3.7 GB of disk space.
Caine 3 Installer

As a Live CD, you can use CAINE 3.0 without installing it to a hard drive, but if you choose to install it to local storage, the installer installs it on a single partition, aside from a Swap partition. You can, of course, install the system on a custom set of partitions, provided you know how to create partitions in Linux, using the Advanced Partitioning Tool. If you are engaged in digital forensics, you probably know how, but if you are new to this, guide to disks and disk partitions in Linux is a good read.
Caine 3 Partitioner

If you have never used or installed Ubuntu before, this is how the user setup step during installation looks like. At this step, you may opt to encrypt your home folder. Note, however, that this folder-level encryption does not offer the same degree of physical security that you get with partition-level disk encryption, which will make its debut in Ubuntu’s desktop installer on Ubuntu 12.10, which is set for release on October 18.
Caine 3 Create User

As a specialized distribution, CAINE comes with software applications that you will not find on a regular desktop distribution. But unlike BackTrack, a specialized distribution for hacking, which comes with more than 98% of its installed software designed for hacking, CAINE ships with mostly regular applications, with just a small percentage of its installed applications designed for digital forensics.

So the menu of the MATE desktop looks just like that of any regular desktop distribution, with the only difference being a menu category called Forensic Tools. The default desktop with the menu in focus is shown below. In essence, you can use CAINE as a regular desktop distribution.
Caine 3.0 Desktop Menu

This shot shows the applications in the Forensic Tools menu category.
Caine 3 Forensic Tools

Network forensics tools.
Caine Mobile Forensic Tools

Mobile forensics tools.
Caine Network Forensic Tools

Related Posts

Zentyal 2.0 review Zentyal, formerly known as eBox Platform, is a multi-purpose Linux distribution based on Ubuntu server. It can function as a network gateway, unified ...
Fedora 15 Xfce review Fedora 15 Xfce is a Fedora 15 Spin. In Fedoraland, a Spin is an alternate edition of Fedora, "tailored for various types of users via hand-picked appl...
Linpus Lite 2.1 review Linpus Lite 2.1 review is a review of the latest release of Linpus Lite, a desktop distribution based on Fedora. The distribution is published by L...
Ubuntu 12.10 review As always, the latest edition of Ubuntu was released on schedule. Ubuntu 12.10, code-named Quantal Quetzal, was released on October 18. What's differe...
Linux Mint 12 KDE review Linux Mint 12 KDE is the latest update to the line of Linux Mint editions that are based on Ubuntu Desktop and use the K Desktop Environment. It is ac...
Zenwalk 6.2 Review Zenwalk 6.2 is the latest version of Zenwalk, a Slackware-based, desktop-oriented Linux operating system. The last review of Zenwalk on this site was...

We Recommend These Vendors and Free Offers

ContainerizeThis 2016 is a free, 2-day conference for all things containers and big data. Featured, will be presentations and free, hands-on workshops. Learn more at

Launch an SSD VPS in Europe, USA, Asia & Australia on Vultr's KVM-based Cloud platform starting at $5:00/month (15 GB SSD, 768 MB of RAM).

Deploy an SSD Cloud server in 55 seconds on DigitalOcean. Built for developers and starting at $5:00/month (20 GB SSD, 512 MB of RAM).

Want to become an expert ethical hacker and penetration tester? Request your free video training course of Online Penetration Testing and Ethical Hacking

Whether you're new to Linux or are a Linux guru, you can learn a lot more about the Linux kernel by requesting your free ebook of Linux Kernel In A Nutshell.

One Comment

  1. First;
    “It is now a project of Digital Forensics for Inter-department Center for Research on Security (CRIS) at the same university.”

    It’s not true…since 2009 I’m the project manager as you can read in Caine’s website everywhere

    And….a forensic distro like Caine is not only an Ubuntu filled of many forensic tools…there are many patches for avoiding the changes to attached devices, as the forensic best practices suggest…write blocking etc.

    Thank you for your review and have a nice day 😉

Leave a Comment

Your email address will not be published. Required fields are marked *