teamdfir / sift

SIFT
MIT License
484 stars 67 forks source link

get error when enters 'sudo sift install' #596

Closed wilsonLam2002 closed 1 year ago

wilsonLam2002 commented 1 year ago

after I enter sudo sift install i get a error like this image

how do i solve this

digitalsleuth commented 1 year ago

Hi @wilsonLam2002 , can you confirm that you have internet access on that machine? If so, you can use the new Cast installer which will be the replacement for the sift CLI you're currently using.

Visit the link above and download the release for your system and architecture, then install it using sudo dpkg -i <downloaded_file>.

Once installed, you can use the command: sudo cast install sift. If you want to use a different mode (ie: server), you would modify it with sudo cast install --mode server sift.

If you give that a shot, it should work. Let us know how that goes and we can go from there.

wilsonLam2002 commented 1 year ago

thanks for the info, but after i enter sudo dpkg -i command it returns dpkg: error: archive 'downloaded file name' is not a regular file. did i download the wrong file?

digitalsleuth commented 1 year ago

No you likely didn't. When I put that's a placeholder for whatever the actual name is of the file you downloaded, since I don't know the name of the file you chose to download. Try it again with the actual file name.

wilsonLam2002 commented 1 year ago

dpkg: error: archive 'cast_v0.14.0_linux_amd64' is not a regular file it still prompt as not a regular file though. fyi before this, I was following steps from https://jameskainth.com/cyber/blog/2022/05/01/SiftUbuntu20Install.html is it possible for it to have any conflict?

digitalsleuth commented 1 year ago

@wilsonLam2002 The file name should end in .deb so you'll have to include that in the command:

sudo dpkg -i cast_v0.14.0_linux_amd64.deb

And make sure you run the command in the directory where you downloaded the file.

wilsonLam2002 commented 1 year ago

thank you very much it worked

wilsonLam2002 commented 1 year ago

i've just finish installing, but shouldn't it be login in to sansforensics?

digitalsleuth commented 1 year ago

Hi @wilsonLam2002 , the username should be your username, and it should be set up with all of the options which come with SIFT if the install completed successfully. Right now, only the VM has the default user of sansforensics.

digitalsleuth commented 1 year ago

Hi @wilsonLam2002 , did the last answer I provided resolve your issue / question?

wilsonLam2002 commented 1 year ago

Hi @wilsonLam2002 , did the last answer I provided resolve your issue / question?

Oh yes, thanks for the help

wilsonLam2002 commented 1 year ago

I'll close this page.

wilsonLam2002 commented 1 year ago

Hahaha