I am developing a series of extraction scripts (currently python 2.7) for a university project - these tools will be provided on a bootable USB for use by first responders when encountering a suspect device (PC/Laptop).
I am currently using the CAINE distro as a payload to transport and execute the scripts given it has in-built in write blocking capabilities on all drives. (This is a must for my project) However the absence of persistence on the USB means that any extracted data is lost on unplugging the USB.
Does anyone know of a platform which can provide the same write-blocking capabilies while also enabling persistent storage on the USB? I understand KALI has a persistent mode, however I also believe this does not come with the write-blocking provided by KALI forensic mode.
I would prefer not to build my own custom distro however if this is the only possible method then any documentation or guidance as to where to start would be greatly appreciated. :)