ssm-acquire Logo

ssm-acquire

A Python module for orchestrating remote forensic data acquisition and analysis from Linux instances using Amazon SSM.

58
Visit website
Compare
Compare
0
MCPThe entire cybersecurity market, one prompt awayTry MCP Access

ssm-acquire Description

ssm-acquire is a Python module that orchestrates content acquisitions and analysis through Amazon Systems Manager (SSM). The tool enables remote forensic data collection from Linux instances running the Amazon SSM Agent. Key capabilities include: - Memory acquisition from Linux instances directly to S3 buckets using SSM - Instance interrogation for top-10 indicators of compromise (IOCs) using OSQuery - Memory sample analysis on target machines using Docker containers - Rekall profile creation using instances as build targets The module leverages Amazon's SSM infrastructure to perform remote forensic operations without requiring direct access to target systems. It supports automated workflows for memory dumping, IOC detection, and forensic analysis in cloud environments. ssm-acquire is distributed as free software under the MPL 2.0 License and is currently in pre-release status. Documentation is available at https://ssm-acquire.readthedocs.io.

ssm-acquire FAQ

Common questions about ssm-acquire including features, pricing, alternatives, and user reviews.

ssm-acquire is A Python module for orchestrating remote forensic data acquisition and analysis from Linux instances using Amazon SSM.. It is a Security Operations solution designed to help security teams with Cloud Forensics, SSM, S3.

Have more questions? Browse our categories or search for specific tools.

ALTERNATIVES

Diffy (DEPRECATED) Logo

A deprecated digital forensics tool by Netflix that helped investigators scope compromises across AWS cloud instances by identifying behavioral differences and outliers during security incidents.

0
BinaryAlert Logo

BinaryAlert is an open-source serverless AWS pipeline that automatically scans files uploaded to S3 buckets with YARA rules and generates immediate alerts when malware is detected.

0
Cloud Forensics Utils Logo

A forensics toolkit for collecting digital evidence from Google Cloud Platform, Microsoft Azure, and Amazon Web Services during incident response investigations.

0

Stay Updated with Mandos Brief

Get strategic cybersecurity insights in your inbox