ssm-acquire
A python module for orchestrating content acquisitions and analysis via Amazon SSM. Features include acquiring memory from a Linux instance to an S3 bucket using SSM, interrogating an instance for top-10 IOCs using OSQuery, analyzing a memory sample on a machine using Docker, and creating a rekall profile using an instance as a build target running the Amazon SSM Agent. This is a pre-release and is free software under the MPL 2.0 License. For more information, refer to the documentation at https://ssm-acquire.readthedocs.io.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
wxHexEditor is a free hex editor / disk editor with various data manipulation operations and visualization functionalities.
A forensic analysis tool that extracts and parses logs, notifications, and system information from iOS/iPadOS devices and backups.
Generate comprehensive reports about Windows systems with detailed system, security, networking, and USB information.
A comprehensive incident response tool for Windows computers, providing advanced memory forensics and access to locked systems.
A library to access FileVault Drive Encryption (FVDE) encrypted volumes on Mac OS X systems.
A library for working with Windows NT data types, providing access and manipulation functions.
A user-friendly and fast Forensic Analysis tool with features like tagging files and generating preview reports.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.