As mentioned earlier, DEFT Linux 8.2 should be run as a virtual host. This process is not as in-depth as installing Kali Linux (as covered in Chapter 2, Installing Kali Linux) because DEFT can be used as a live forensic acquisition distribution.
Once the DEFT Linux ISO image had been downloaded (from http://na.mirror.garr.it/mirrors/deft/), open VirtualBox, click New, and enter the following details:
- Name: Deft 8.2
- Type: Linux
- Version: Ubuntu (64-bit) (Verify that the details entered, match those in the screenshot)
Now, after filling in the appropriate information, follow these steps:
- Assign 4 or more GBs of RAM.
- Leave the default option of Create a virtual hard disk now and click Create.
- Leave the default option of VDI (VirtualBox Disk Image) and click Next.
- Leave the default option of Dynamically allocated, click Next, and click on Create.
- Click the green start arrow on the VirtualBox Manager screen to start the VM.
When prompted to Select start-up disk, click the browse-folder icon and browse to the downloaded DEFT Linux 8.2 ISO image, then click Start:
This brings the user to the DEFT splash screen. Select English for your language and select DEFT Linux 8 live:
After DEFT Linux boots and loads the desktop, click the DEFT menu button on the lower left corner, then click the Service menu, and then click Apache start. Repeat this process to get to the Service menu and then click Xplico start:
Finally, start Xplico by clicking the DEFT button, then go to the DEFT menu, across to Network Forensics, and click Xplico:
This brings us to the very same Xplico web interface GUI also available in Kali Linux:
