Skip to content
/ sift Public
forked from teamdfir/sift

SANS Investigative Forensics Toolkit

Notifications You must be signed in to change notification settings

kordovero/sift

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

11 Commits
 
 

Repository files navigation

SANS Investigative Forensic Toolkit (SIFT)

This repository is used to track all issues for SIFT.

Installation

The installation and setup process has been streamlined by the release of the SIFT CLI. Please follow these instructions to install the CLI tool.

Manual

If you are interested in contributing, testing or installing manually without using the CLI tool, please visit the sift-salt repository.

Bootstrap (Fully Deprecated)

This method is no longer supported. The repository has been left for legacy reasons and a way to let everyone know it is no longer supported.

Roadmap

  • VMs should be published at least monthly (or more frequently)
  • Be compatible with the REMnux installation (a similar effort is happening to make it use Saltstack (https://github.com/remnux/salt-states)
  • Use Packer to build VMWare/Virtualbox/Cloud images using the salt states teamdfir#116
  • Use CI provider to do tests
    • Each salt state should be testable and cross dependencies should be setup appropriately
    • Each salt state should include application specific testing (where possible) (ie. volatility)
  • Use Saltstack to build and perform updates to any SIFT installation (https://github.com/sans-dfir/sift-saltstack) teamdfir#114
  • Build CLI tool to download, verify, and run salt states on VM (@ekristen is building a prototype right now that will use GitHub releases and signatures to verify salt state downloads for both SIFT and REMnux)

About

SANS Investigative Forensics Toolkit

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published