Unless you tell it otherwise, I believe BT will mount all drives as read/write.
Hi im new to this forum so i would just like to say hello first
My question is this.
Does backtracks default boot mode mount my harddrive or other media as read only?
Or does it mount them as read/write?
I have backtrack 5 installed on harddrive but i regulary boot in to my live USB, Im just now wandering what im actually leaving behind on my laptops drives?
any help would be greatly appreciated.
Unless you tell it otherwise, I believe BT will mount all drives as read/write.
If I could figure out how to scuba dive & hack at the same time, there would be nothing I couldn't do...
When launching from hard drive, my BT never mounts anything unless I tell it to (but the swap and of course the volume being used...).
For the LiveCD, I'm not so sure, but there is a forensic mode if you don't want to leave traces.
(I think there is a method called cold boot to extract data from RAM after reboot. I can't be certain though...
Edit : more precision here : http://en.wikipedia.org/wiki/Cold_boot_attack
I wasn't so far)
Last edited by comaX; 03-20-2012 at 01:00 PM.
Running both KDE and GNOME BT5 flawlessly. Thank you !
So then the Backtrack live cd default boot mode will mount the host HD and hosts swap, and potentially write information about my activities to the disks on the host computer?
How much of my Live session would be recoverable?
Any idea how what kind of things would be left behind?