USB Emergency Kit

Derived from an old Reddit post, this is a curated kit of tools to keep on a single bootable USB drive. The sections below cover building the drive, verification practices, and the categories of bootable images and portable applications worth dropping onto it. For NVMe-boot quirks on legacy systems, see the Booting section of SSD Links. For SSD vendor utilities and Windows-side health tools, see Software.

Building the Kit

The simplest path is Ventoy, which lets you copy multiple ISOs onto one drive and pick at boot time. Use a 32GB or larger USB drive, ideally USB 3.x for speed. Run Ventoy once to create the partition, then drop ISO files onto it as needed.

  • Ventoy – multi-ISO bootable USB
  • Rufus – single-ISO writer for Windows; useful when Ventoy chokes on a finicky image
  • balenaEtcher – cross-platform GUI image writer

Verification & Safety

A rescue kit is only useful if you can trust it. Standard practices:

  • Verify ISO checksums and signatures before adding them to the drive. Most rescue projects publish SHA-256 sums and PGP signatures alongside the ISO.
  • Refresh the kit periodically. AV signatures, Windows install media, rescue ISOs, and vendor tools all rot.
  • Test boot on at least one UEFI machine before relying on the kit in an emergency.
  • Keep a second clean USB drive for one-off imaging when Ventoy chokes on an image or you need a known-good single-ISO writer target.
  • Mind read/write risk. Forensics and recovery media should avoid writing to the suspect disk unless that is the explicit intent.

Linux Live

General-purpose live distros for recovery work, exploration, and tools that only run on Linux.

  • Debian Live – official live images; pick a desktop image with the firmware support you need
  • Fedora Workstation – newer kernel and hardware support
  • Ubuntu LTS – broad desktop and hardware familiarity
  • Kali Linux – security testing, not general rescue
  • Tails – privacy and anonymity, not repair

Anti-Virus Rescue

Bootable AV environments for scanning a compromised system from outside its installed OS. Availability and update legality vary by jurisdiction.

  • Kaspersky Rescue Disk – US users should not rely on this; under the September 2024 Commerce Department prohibition, Kaspersky cannot provide signature updates to US persons
  • Dr.Web LiveDisk

Imaging, Cloning & Partitioning

Creating disk images, cloning drives, and managing partitions from outside the running OS.

Data Recovery

Image first, recover second. If a drive is failing, avoid repeated scans against the original media; clone it with ddrescue and work from the image.

  • TestDisk – partition table recovery
  • PhotoRec – file carving by signature when partition data is gone
  • GNU ddrescue – failing-disk imaging with retry and skip-bad-block logic
  • DMDE – lightweight partition and file recovery; free tier covers most ad-hoc cases

System Rescue & Repair

General-purpose rescue environments for fixing broken installs, recovering data, and walking through standard repair tasks.

Hardware & Storage Diagnostics

For ruling out hardware failure when symptoms are ambiguous, and for inspecting drive health from a known-good environment. The Linux SMART and NVMe utilities listed below ship preinstalled in SystemRescue and most live distros, so they are available the moment those ISOs boot.

  • MemTest86+ – RAM testing
  • HDAT2 – bootable disk diagnostic and bad-sector tool
  • smartmontools (smartctl) – SMART attribute and health-log inspection
  • GSmartControl – GUI front-end for smartctl
  • nvme-cli – NVMe identify, log pages, sanitize, format
  • HDDScan – Windows-side disk diagnostics; use with caution on suspect drives

Quick Windows-side health checks via CrystalDiskInfo Portable and similar are catalogued on the Software page.

Windows Recovery & Installation

Booting Windows recovery environments and creating clean installation media from official Microsoft sources.

Forensics & Password Recovery

Investigating a system without writing to its disks, or recovering local-account access. The chntpw utility for offline Windows password reset is already bundled in Hiren’s PE and most Linux rescue distros, so it does not need its own slot.

  • CAINE – Linux forensics distro with read-only mounting by default
  • Ophcrack LiveCD – rainbow-table password recovery; mostly useful against legacy local accounts on older Windows installs

Secure Wipe & Sanitization

SSD sanitization is not the same as overwriting a hard drive. Block-level overwrite tools written for HDDs do not reliably erase reserved or remapped flash cells; for SSDs, use the controller’s own sanitize or secure-erase command. The reference for all of this is NIST SP 800-88 Rev. 2: Guidelines for Media Sanitization.

  • ShredOS – open-source HDD overwrite live USB (DBAN successor); the right tool for spinning rust, not the right tool for SSDs by itself
  • nvme-cli format / sanitize – controller-level NVMe sanitization, the correct path for NVMe SSDs
  • hdparm – ATA Secure Erase for SATA SSDs; available in Parted Magic, SystemRescue, and most live distros
  • Vendor SSD tools where available – see the Software page

Firmware, BIOS & Vendor Utilities

What to keep on the drive in addition to bootable images, kept lean to avoid a maintenance treadmill.

  • Motherboard BIOS update files for your own systems, downloaded from the OEM and verified against the OEM’s published checksums
  • Chipset, storage, and network drivers for your own hardware (Intel, AMD, vendor NIC and Wi-Fi)
  • OEM recovery media links for the systems you support: Dell, Lenovo, HP, Microsoft Surface, etc.
  • SSD vendor tools (Samsung Magician, WD Dashboard, Solidigm Storage Tool, Crucial Storage Executive, Kingston SSD Manager, etc.) – catalogued on the Software page

Portable Applications & Drivers

Non-bootable add-ons that travel well on the same drive for use on running systems.

Windows admin tools

  • Microsoft Sysinternals Suite – Process Explorer, Autoruns, Process Monitor, and the rest of the Russinovich toolkit
  • 7-Zip – archive extraction
  • Everything – instant filename search
  • WizTree – fast disk-usage visualization via MFT
  • TreeSize Free – alternate disk-usage view
  • Notepad++ – capable text editor
  • Firefox Portable – a known-clean browser when the host browser is suspect
  • KeePassXC – offline password vault for working in unfamiliar environments
  • NirSoft tools – system info, password recovery, network and credential utilities; AV products often flag these because of what they read, not what they do

App suites and driver tools

Scroll to Top