ssm-acquire Logo

ssm-acquire

0
Free
Visit Website

A python module for orchestrating content acquisitions and analysis via Amazon SSM. Features include acquiring memory from a Linux instance to an S3 bucket using SSM, interrogating an instance for top-10 IOCs using OSQuery, analyzing a memory sample on a machine using Docker, and creating a rekall profile using an instance as a build target running the Amazon SSM Agent. This is a pre-release and is free software under the MPL 2.0 License. For more information, refer to the documentation at https://ssm-acquire.readthedocs.io.

FEATURES

ALTERNATIVES

A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys.

Orochi is a collaborative forensic memory dump analysis framework.

Belkasoft offers cybersecurity solutions, training, and tools for businesses, law enforcement, and academia.

Toolkit for post-mortem analysis of Docker runtime environments using forensic HDD copies.

wxHexEditor is a free hex editor / disk editor with various data manipulation operations and visualization functionalities.

A toolkit for forensic analysis of network appliances with YARA decoding options and frame extraction capabilities.

An anti-forensic kill-switch tool for USB ports to shut down the computer immediately in case of unauthorized access.

A suite of console tools for working with timestamps in Windows with 100-nanosecond precision.