USB Emergency Kit

Derived from an old Reddit post, this is a curated kit of tools to keep on a single bootable USB drive. The sections below cover building the drive, verification practices, and the categories of bootable images and portable applications worth dropping onto it. For NVMe-boot quirks on legacy systems, see the Booting section of SSD Links. For SSD vendor utilities and Windows-side health tools, see Software.

Building the Kit

The simplest path is Ventoy, which lets you copy multiple ISOs onto one drive and pick at boot time. Use a 32GB or larger USB drive, ideally USB 3.x for speed. Run Ventoy once to create the partition, then drop ISO files onto it as needed.

If you ever need to reimage several machines at once instead of carrying the stick around, iVentoy is the same idea over the network: a PXE server that boots these same ISOs across the LAN. Its free edition is x86_64-server only, so running it on an ARM box like a router or Raspberry Pi needs the paid Pro edition.

  • Ventoy – multi-ISO bootable USB
  • Rufus – single-ISO writer for Windows; useful when Ventoy chokes on a finicky image
  • balenaEtcher – cross-platform GUI image writer

Verification & Safety

A rescue kit is only useful if you can trust it. Standard practices:

  • Verify ISO checksums and signatures before adding them to the drive. Most rescue projects publish SHA-256 sums and PGP signatures alongside the ISO.
  • Refresh the kit periodically. AV signatures, Windows install media, rescue ISOs, and vendor tools all rot.
  • Test boot on at least one UEFI machine before relying on the kit in an emergency.
  • Keep a second clean USB drive for one-off imaging when Ventoy chokes on an image or you need a known-good single-ISO writer target.
  • Mind read/write risk. Forensics and recovery media should avoid writing to the suspect disk unless that is the explicit intent.

Linux Live

General-purpose live distros for recovery work, exploration, and tools that only run on Linux.

  • Debian Live – official live images; pick a desktop image with the firmware support you need
  • Fedora Workstation – newer kernel and hardware support
  • Ubuntu LTS – broad desktop and hardware familiarity
  • Kali Linux – security testing, not general rescue
  • Tails – privacy and anonymity, not repair

Anti-Virus Rescue

Bootable AV environments for scanning a compromised system from outside its installed OS. Availability and update legality vary by jurisdiction.

  • Kaspersky Rescue Disk – US users should not rely on this; under the September 2024 Commerce Department prohibition, Kaspersky cannot provide signature updates to US persons
  • Dr.Web LiveDisk

Imaging, Cloning & Partitioning

Creating disk images, cloning drives, and managing partitions from outside the running OS.

Data Recovery

Image first, recover second. If a drive is failing, avoid repeated scans against the original media; clone it with ddrescue and work from the image.

  • TestDisk – partition table recovery
  • PhotoRec – file carving by signature when partition data is gone
  • GNU ddrescue – failing-disk imaging with retry and skip-bad-block logic
  • DMDE – lightweight partition and file recovery; free tier covers most ad-hoc cases

System Rescue & Repair

General-purpose rescue environments for fixing broken installs, recovering data, and walking through standard repair tasks.

Hardware & Storage Diagnostics

For ruling out hardware failure when symptoms are ambiguous, and for inspecting drive health from a known-good environment. The Linux SMART and NVMe utilities listed below ship preinstalled in SystemRescue and most live distros, so they are available the moment those ISOs boot.

  • MemTest86+ – RAM testing
  • HDAT2 – bootable disk diagnostic and bad-sector tool
  • smartmontools (smartctl) – SMART attribute and health-log inspection
  • GSmartControl – GUI front-end for smartctl
  • nvme-cli – NVMe identify, log pages, sanitize, format
  • HDDScan – Windows-side disk diagnostics; use with caution on suspect drives

Quick Windows-side health checks via CrystalDiskInfo Portable and similar are catalogued on the Software page.

Windows Recovery & Installation

Booting Windows recovery environments and creating clean installation media from official Microsoft sources.

Forensics & Password Recovery

Investigating a system without writing to its disks, or recovering local-account access. The chntpw utility for offline Windows password reset is already bundled in Hiren’s PE and most Linux rescue distros, so it does not need its own slot.

  • CAINE – Linux forensics distro with read-only mounting by default
  • Ophcrack LiveCD – rainbow-table password recovery; mostly useful against legacy local accounts on older Windows installs

Secure Wipe & Sanitization

SSD sanitization is not the same as overwriting a hard drive. Block-level overwrite tools written for HDDs do not reliably erase reserved or remapped flash cells; for SSDs, use the controller’s own sanitize or secure-erase command. The reference for all of this is NIST SP 800-88 Rev. 2: Guidelines for Media Sanitization.

  • ShredOS – open-source HDD overwrite live USB (DBAN successor); the right tool for spinning rust, not the right tool for SSDs by itself
  • nvme-cli format / sanitize – controller-level NVMe sanitization, the correct path for NVMe SSDs
  • hdparm – ATA Secure Erase for SATA SSDs; available in Parted Magic, SystemRescue, and most live distros
  • Vendor SSD tools where available – see the Software page

Firmware, BIOS & Vendor Utilities

What to keep on the drive in addition to bootable images, kept lean to avoid a maintenance treadmill.

  • Motherboard BIOS update files for your own systems, downloaded from the OEM and verified against the OEM’s published checksums
  • Chipset, storage, and network drivers for your own hardware (Intel, AMD, vendor NIC and Wi-Fi)
  • OEM recovery media links for the systems you support: Dell, Lenovo, HP, Microsoft Surface, etc.
  • SSD vendor tools (Samsung Magician, WD Dashboard, Solidigm Storage Tool, Crucial Storage Executive, Kingston SSD Manager, etc.) – catalogued on the Software page

Portable Applications & Drivers

Non-bootable add-ons that travel well on the same drive for use on running systems.

Windows admin tools

  • Microsoft Sysinternals Suite – Process Explorer, Autoruns, Process Monitor, and the rest of the Russinovich toolkit
  • 7-Zip – archive extraction
  • Everything – instant filename search
  • WizTree – fast disk-usage visualization via MFT
  • TreeSize Free – alternate disk-usage view
  • Notepad++ – capable text editor
  • Firefox Portable – a known-clean browser when the host browser is suspect
  • KeePassXC – offline password vault for working in unfamiliar environments
  • NirSoft tools – system info, password recovery, network and credential utilities; AV products often flag these because of what they read, not what they do

App suites and driver tools

Scroll to Top