google / turbinia

Automation and Scaling of Digital Forensics Tools
Apache License 2.0
725 stars 163 forks source link

WIP: Add AWS EBS disk evidence type and processor #1478

Open aarontp opened 2 months ago

aarontp commented 2 months ago

WIP

Description of the change

Adds a new AwsEbsVolume evidence type for AWS EBS disks and the related pre/post-processors so we can attach and mount these disks.

Other notes:

Applicable issues

Fixes #1318

Additional information

Only certain disk types are compatible with multi-attach so this first iteration will only support those types, and for other disk types we'll only be able to support a single worker for now. In future PRs we'll try to come up with a method to process these disks, possibly by making a copy of the disk with a disk type that supports multi-attach.

Checklist