Documentation Tsurugi Linux [LAB]
The main idea behind the Tsurugi Linux project is about simplicity as far as the topics can be really complex. The customized menus have been structured with the "ideal investigation order" where all the tools have been grouped by categories.
Each tool has been classified by its main features so, if several are presents, it could be possible to find it inside more than one categories, this it means that it's possible to find the right tool only by going through the menu following own needs.
Here below all main categories:
• Imaging
• Hash
• Mount
• Timeline
• Artifacts Analysis
• Data Recovery
• Memory Forensics
• Malware Analysis
• Password Recovery
• Network Analysis
• Picture Analysis
• Mobile Forensics
• OSINT
• Cloud Analysis
• Virtual Forensics
• Crypto Currency
• Other Tools
• Reporting
All virtualization tests have been done using VirtualBOX 6.1 and VmWare softwares but Tsurugi Linux should be compatible with also other virtualization systems. An official Virtual Machine (in OVA format) is available in our download section.
As first step you just need to start the system and install the guest addition tools for better performance and usability:
• On VirtualBOX we suggest to download it from the official site and NOT the repository
• On VmWare we suggest to install 'open-vm-tools' from the repository
If needed it's suggested to adjust the hardware settings only after these steps because with some Windows systems and VmWare it could crash
Another important information is that on VmWare, after the ova import, it could be shown an error message just due to the lack of virtual guest addition tools so don't care about it
The default password is "tsurugi"
About accessibility several features are available by default:
• On screen keyboard
• Screen magnifier
• Screen reader
• Mouse keys switch
• High contrast graphical templates