search

teamdfir / sift

SIFT
MIT License
484 stars 67 forks source link

Look at adding Dissect tool #591

Open khyrenz opened 1 year ago

khyrenz commented 1 year ago

Review Dissect tool and add to SIFT: https://github.com/fox-it/dissect

Company page on Dissect: https://www.fox-it.com/nl-en/dissect/ The team also presented at CyberThreat 2023 and would like to submit to DFIR Summit 2023 (US and EU)

ekristen commented 1 year ago

Thanks for the issue. Will review.

digitalsleuth commented 1 year ago

Looking at this now, requires Python 3.9. Focal currently only ships with 3.8. When attempting to test this, the acquire tool does not function, and errors out with a TypeError: 'type' object is not subscriptable error when using the sudo acquire command.