Tsurugi Linux

Tsurugi Linux is an Ubuntu-based Linux distribution designed to support Digital Forensics and Incident Response (DFIR) investigations, malware analysis, and Open Source INTelligence (OSINT) activities. It comes with many popular software tools to conduct an in-depth forensic or incident response investigation, as well as several special features, like device write blocking at kernel level, a dedicated Computer Vision analysis functionality, and an OSINT profile switcher. Tsurugi Linux can be used in live mode but its main goal is to be installed and to serve as the default forensics lab.