Printable View
Can someone tell if you've used knoppix on a computer? Is there an autoloader script that gets written to the hard drive as a trace. If I want to find out if someone is using knoppix on my network after they've finished using knoppix live-cd, how do I know after the fact? or is it a lost cause, no trace situation?
As long as you don't have a Linux swap partition or force Knoppixt to write to the hard disk, Knoppix will not write to the hard disk. One could still detect that Knoppix had been used on a system by careful analysis of network traffic logs or by watching key parts of the network activity. And a way that occasionally works is to check the optical drive and find the disc that the abuser forgot and left behind.