Offline Debian-Based Windows Rescue ISO Creation

I already have a working Linux workstation and blank USB sticks. What I need is a reproducible way to build a clean rescue ISO image based on Debian Stable — fully offline-capable — for Windows forensics and recovery.

Purpose:
I want to boot this ISO from USB on compromised Windows machines (even unbootable ones), and immediately run ClamAV plus a set of disk-recovery utilities to clean and salvage data.

Requirements:
• The build must start from Debian Stable, using debootstrap, live-build, or similar tools — not random remixes.
• Use GRUB as the bootloader.
• Pre-install ClamAV, with virus definitions bundled so it works offline right after boot.
• Include reliable disk tools:
• TestDisk / PhotoRec
• ddrescue (or equivalent)
• The ISO should mount all Windows drives read-only by default. There should be a clear option to remount read-write manually.
• Deliverable must include a README or script that documents:
• All commands and packages used
• How to regenerate the ISO from scratch
• How to flash it to USB (Ventoy-compatible is a bonus)

⸻
Optional Additions (if you want to go extra pro)

You can optionally add:

Bonus points for:
• A small GUI (like XFCE or minimal LXDE)
• Integrated file manager and terminal on startup
• Boot splash with custom message (e.g. “YQ Rescue v1.0”)
• Optional persistent partition setup