Operating system's solely focused for defensive security teams.
- Bitscout - LiveCD/LiveUSB for remote forensic acquisition and analysis.
- SANS Investigative Forensics Toolkit (SIFT) - Linux distribution for forensic analysis
- The Sleuth Kit - Forensic toolkit for analyzing Microsoft and UNIX file systems and disks.
- Tsurugi - Linux distribution for DFIR
- WinFE - Windows Forensics