System Configuration for ForensiX

Nominal system configuration

Nominally, to run ForensiX, you will need a PC running a Unix or Linux variant and about 150M bytes of disk space. You will also need enough disk space to hold any images you make and the associated files generated by ForensiX. As a rule of thumb, you will need about 25% more disk space free than the size of the disk you are imaging in order to store all of the necessary information.

Compatability

To build a ForensiX compatable system, you will beed to run RedHat 6.0 or anoother upward compatable Linux system. ForensiX will support all devices that Linux supports on the system, so get hardware that is Linux compatable and it will be ForensiX compatable.

For laptop configurations, we currently use an IBM 600 computer and mount external disks for imaging using the PCMCIA ports. Check IBM and Linux resources for details on compatability.

For Desktop computers, we currently run on off-the-shelf desktop systems.

External interfaces that we believe to be worth getting include SCSI and IDE interfaces, a LAN card, serial and parallel port converters of various sorts, external disk interfaces for expanded memory, a CD-rewritable disk or external SCSI tape drive for backing up images, and a set of connectors for different sorts of disks and other media. In your kit, you might also want to have a wide range of mountable disk drives to handle the media you find on site.


Two example systems

This is the configuration I use in two sample systems I have operating in my offices: