Tsurugi Linux

Tsurugi Linux focuses on digital forensics and incident response (DFIR), open-source intelligence (OSINT) gathering, and malware analysis, distinguishing itself from CAINE and other forensics distributions with a dedicated computer-vision analysis section for image/video evidence and an OSINT profile switcher for tailoring the environment to different investigation types. Like CAINE, it implements device write-blocking at the kernel level to prevent accidental modification of evidence media during acquisition and analysis, a non-negotiable requirement for forensically sound work. It's actively maintained by an international team of forensics practitioners and continues to see regular tool updates, unlike some older, more dormant forensics-distribution projects.