DEFT (Digital Evidence & Forensic Toolkit) is a customised distribution of the Xubuntu live Linux CD. It is an easy-to-use system that includes excellent hardware detection and some of the best open-source applications dedicated to incident response and computer forensics.
After more than two years of apparent hiatus, the Ubuntu-based DEFT Linux distribution (featuring specialist tools for forensic analysis) has sprung to life with a new release. Dubbed as "DEFT Zero" and labelled as version 2017.1, the new build is much more compact and lightweight, but it brings some useful new features: "DEFT Zero 2017.1 ready for download. We can finally announce that a stable version of DEFT Zero is available. DEFT Zero is a light edition of DEFT specifically designed to perform forensic acquisition of digital evidence. Among the biggest features is the support to NVMExpress memory (MacBook 2015), eMMC memories and UEFI. DEFT Zero requires considerably lower space in RAM and on a CDROM or USB drive. It needs about 400 MB, which can even boot in the RAM pre-loaded mode on a obsolete and low-resource hardware. DEFT Zero is based on Lubuntu 14.04.02 LTS and its future releases will be developed in parallel with DEFT full edition.
Once you have finished your software download we would appreciate you coming back and rating your chosen mirror by clicking on it's name and choosing an option that reflects your experience. The number beside each mirror below reflects the ratings given by other visitors, the higher the percentage the better the mirror.
Would you like to receive an email when a new version of DEFT Linux is released? If so then click here.
Are you having a problem downloading Linux from LQ ISO? Let us know and we'd be happy to address the issue.
DEFT (Digital Evidence & Forensic Toolkit) is a customised distribution of the Xubuntu live Linux CD. It is an easy-to-use system that includes excellent hardware detection and some of the best open-source applications dedicated to incident response and computer forensics.