
The biggest news in DEFT are two. The first is that the project is also dedicated to incident response issues; the second is that the DEFT will have two core, one dedicated to the server (based on CentOS) and one (based on Lubuntu) for personal computer, Mac and workstations x86, all of them into a live DVD; the choice of double kernel was determined after a thorough series of tests that led to the following conclusion: the desktop environments have different needs from enterprise environments in terms of drivers and performance. The end user decide what to run based on its need, if you must acquire a server, run DEFT SE, but if you needs to perform analysis or acquisition activities of pc or Mac, run DEFT.
DEFT features
- Based on Lubuntu 11.10 and DEFT Extra 3 (Windows side)
- Linux Kernel 3 -usb3 ready
- Guymager 0.5.9
- Dhash 2
- Xplico DEFT edition 0.6.3
- TSK 3.2.2 (or the latest stable version at the date of release)
- Autopsy 2.24 and 3 (beta)
- Digital Forensics Framework 1.1.0
- Libewf
- Afflib 3.6.12 (or the latest stable version at the date of release)
- Scalpel 2.0
- Foremost 1.5.7
- Hunchbacked 4most 0.6
- Log2timeline 0.60
- ClamAV Anti Virus / Malware 0.9.6
- Mount Manager 0.2.6
- TrID 2.10
- Wine 1.3 for the implementation of tools for Windows-based Computer Forensic
- KeepNote 0.7 (reporting tool)
- Emule forensic
DEFT SE features
- Based on CentOS 6
- dd, ddrescue, dd_rescue, dc3dd and dcfldd
- guymager and dhash
Roadmap
- Feature freeze – September 2011
- Tools test – October 2011
- Kernel freeze – October 2011
- Extra DEFT test – November 2011
- Wine tools testing – November 2011
- Beta release – December 23 2011
- DEFT Linux 7 stable – January 27 2012
- Documentation DEFT stable – January 27 2012



