Is it possible to boot from a live distribution on a Windows computer without any traces?

Question

linux

There is a PC with Windows. If you boot there via a USB flash drive with puppylinux, can you find out about it later? That is, are there any traces of such a download on Windows or somewhere else?
Well, or take for example openelec. I installed it on a USB flash drive, and booted from it on a computer where the main OS is windows 7. Are there any theoretical chances to find out about this later?

Answer 1

And why, after booting from a USB flash drive, should traces be left on an extraneous system disk?

Answer 2

Alexey POS_troi says everything correctly. That's just the disk can be mounted in read-only. Then the files will be available for reading, but not for writing. Accordingly, no traces will remain.

Answer 3

If you don’t try to climb onto Windows disks from under linux, then no, and then this will only be very indirect evidence and it’s almost impossible to prove that the file access date has been changed from under Linux and not Windows.
If you allow us to edit microsoft office files from under Linux and save them to the laptop disk, then in general it will appear in the metadata that the file was created / edited in Libreoffice, and then this can be cleaned up.
In general - if you boot from a flash drive and do not climb to the laptop disk, then it is unrealistic to prove anything.

Answer 4

Well, in the Windows log there will be at least the fact of a reboot and the fact of a restart. Both records show the time. The sign is indirect, of course, but if the machine never turns off - questions may arise - why reboot?

Answer 5

You need to look towards forensic.
Read here: KALI
In principle, such goodness is enough.
Offhand, you can see here - a description of 20 different tools.