ssm-acquire Logo

ssm-acquire

0
Free
Visit Website

A python module for orchestrating content acquisitions and analysis via Amazon SSM. Features include acquiring memory from a Linux instance to an S3 bucket using SSM, interrogating an instance for top-10 IOCs using OSQuery, analyzing a memory sample on a machine using Docker, and creating a rekall profile using an instance as a build target running the Amazon SSM Agent. This is a pre-release and is free software under the MPL 2.0 License. For more information, refer to the documentation at https://ssm-acquire.readthedocs.io.

FEATURES

ALTERNATIVES

A tool for extracting files from packet capture files with ease of use and extensibility for Python developers.

Advanced computer forensics software with efficient features.

A Kernel fuzzer focusing on race bugs

Highlighter is a FireEye Market app that integrates with FireEye products to provide enhanced cybersecurity capabilities.

Open Backup Extractor is an open source program for extracting data from iPhone and iPad backups.

RegRippy is a modern Python 3 alternative to RegRipper for extracting data from Windows registry hives.

MFT and USN parser for direct extraction in filesystem timeline format with YARA rule support.

A framework for orchestrating forensic collection, processing, and data export.