[ENHANCEMENT]: Forensics tools suggestion

[MikeHorn-git]

• acquire : Tool to quickly gather forensic artifacts from disk images or a live system
• fatcat : FAT filesystems explore, extract, repair, and forensic tool
• file : A program that shows the type of files
• hstsparser : Tool to parse Firefox and Chrome HSTS databases into forensic artifacts
• mac-robber : A digital investigation tool that collects data from allocated files in a mounted file system
• ntfs-3g : FUSE-based NTFS driver with full write support
• osquery : SQL powered operating system instrumentation, monitoring, and analytics
• prowler : Security tool for AWS, Azure and GCP to perform Cloud Security best practices assessments
• scalpel : Recover files based on their headers, footers and internal data structures, based on Foremost
• tracee : Linux Runtime Security and Forensics using eBPF

[AkechiShiro]

Hi @MikeHorn-git thanks for the suggestion, we'll also be working on adding the tools from : https://tsurugi-linux.org/documentation_tsurugi_linux_tools_listing_2024.php

As best as possible given some tools licenses.

We'll be working on a tracker to let the community vote which package should be the priority, ntfs-3g is packaged already, you can find packages by query here : https://search.nixos.org/packages?query=

• [X] acquire
• [X] osquery
• [X] fatcat
• [X] mac-robber
• [X] ntfs-3g
• [X] file
• [X] prowler
• [X] scalpel
• [X] tracee

All of the tools are already packaged, they only need to be added in the forensic role, I'll try and see if I can PR this and @D3vil0p3r may review

[D3vil0p3r]

Added in forensic role.