-
There is an issue with loading EWF files when there are other similar named files in the same folder which are not part of the image. Example:
```bash
$ ls
test.e01 test.e02 test.e03 test.txt
`…
-
### Package Name
autopsy.vm
### Tool Name
Autopsy
### Package type
GITHUB_REPO
### Is the tool a console application?
false
### Tool's version number
4.21.0
### Category
Forensic
### Tool'…
-
Review practices for ingest of disk images. When should disk images be used (vs copying directories / files only)? Should disk images be ingested or processed prior to ingest? Experiment with BitCurat…
-
Are there any memory forensics tools built into GRR? Most online resources point to Rekall, but according to #448, Rekall support has been deprecated.
-
### Description
This is one of the best transaction forensics tools out there.
It could really scale if one could do one or all of the above.
1) run it on tenderly nodes
2) run it on testnets
3) …
-
### Problem description
There are a couple of digital forensic tools out there eg Encase that allow a remote memory dump and to image a remote drive.
### Proposal
It would be good to add similar …
-
![kali-castegories](https://user-images.githubusercontent.com/53346722/78282728-5d999a80-74e2-11ea-933d-be8ea15b3d7d.png)
- [ ] `kali-database-assessment-trans`
- [ ] `kali-exploitation-tools-tran…
-
It would be useful to be able to have pre-built schemas for common tool outputs, such as from Volatility modules, Eric Zimmerman's suite of tools, popular open-source forensics tools (AmcacheParser, a…
-
**Is this a BUG REPORT or FEATURE REQUEST?**:
BUG
**What happened**:
When submitting a PodCheckpoint, if the name is long (>63 characters) then the PodCheckpoint will fail to process.
```
{"l…
-
When doing forensics / debugging on slog data, with nestedEvaluate, we had this handy kludge for getting a name from a bundle:
```python
EPRE = re.compile(r'const entrypoint = "([^"]+)"')
```
-…
dckc updated
7 months ago