@drmorrisj consider doing your own debian blends like enc persistent bootable nvme - i mean you have to install most of the forensics tools yourself first - with the enc persistence that would be all set up for the user#forensics_full #chattr #federated enclaves #distributed inference #compintel/osint/BI #erp #crm #tagged metadata #pkt cap #audit trail #tcp_replay #rational clearcase #malcolm ids #kibana dashboards #monitoring