toolkit

Container forensics tool

A toolkit for analyzing Docker containers from forensic images of host systems

A toolkit for the post-mortem examination of Docker containers from forensic HDD copies

GitHub

94 stars
6 watching
15 forks
Language: Python
last commit: 9 months ago
Linked from 1 awesome list


Backlinks from these awesome lists:

Related projects:

Repository Description Stars
google/docker-explorer A tool to help analyze and explore offline Docker filesystems. 529
dockershelf/dockershelf Provides pre-built, stable Docker images for popular languages and tools. 88
accenture/docker-plaso A Docker container for analyzing digital evidence using the Plaso supertimlining tool 1
packing-box/docker-packing-box A tool for analyzing and training on packed executables to improve detection techniques 49
dissectmalware/officeforensictools A Python-based collection of tools for gathering forensic information from Office documents 26
dockstring/dockstring A Python package for easy molecular docking and benchmarking. 158
diogomonica/docker-bench-security Automated security testing and benchmarking tool for Docker containers in production environments. 21
orlikoski/skadi A comprehensive collection of tools and platforms for digital forensics, threat analysis, and incident response 491
eliasgranderubio/dagda A tool to analyze and monitor Docker images and containers for security threats 1,159
pjrinaldi/wombatforensics A multi-threaded GUI forensic analysis tool for Linux 47
sitecore/docker-tools Utilities to simplify development and deployment of Sitecore applications in containerized environments 27
zubux/drydock Tools for assessing Docker daemon configuration and container security 65
zephrfish/dockerattack Provides pre-configured Docker images and deployment scripts for various pentesting tools and internal infrastructure tasks 278
j-bennet/wharfee A CLI tool that provides autocompletion and syntax highlighting for Docker commands 658
teamssix/container-escape-check Detects potential vulnerabilities in Docker containers by checking for common escape methods 556