Tsurugi Linux
The sharpest weapon in your DFIR arsenal

Tsurugi Linux is a free, open-source Linux distribution designed for digital forensics, incident response (DFIR), OSINT, and malware analysis. It comes in multiple editions: a full 64-bit lab version, a lightweight 32-bit acquisition tool, and a portable toolkit called BENTO for live investigations. The project is community-driven with a focus on education and sharing knowledge.
Users download and boot one of the Tsurugi Linux editions (LAB, Acquire, or BENTO) to get a ready-made environment with forensics and investigation tools pre-installed.
digital forensics investigators, security analysts, and DFIR professionals
Background.
- Status
- launched
- Business model
- free
- Launched
- 2018
Similar projects.
Editorial take on the space this project sits in — momentum signals, adjacent moves, our call on whether the wedge is real. Get pinged when we publish a new read or when the landscape shifts.
Have a take on this space?
Tell us what you’d build differently, where you think the incumbents miss, or what we’ve gotten wrong about this project. Comments + reactions are coming soon.