Skip to content
/ dFT Public

Collection of DFIR tools incirporated all in one docker image

License

Notifications You must be signed in to change notification settings

nov3mb3r/dFT

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

17 Commits
 
 
 
 
 
 

Repository files navigation

dFT

docker Forensic Toolkit

Fast and lightweight docker image with the most popular and widely used open-source forensic tools

Overview

The Docker image is based on Alpine Linux, the most lightweight linux container distribution.

Install Docker

Wait! It's dangerous to go alone!

Make sure you have the Docker engine installed. Click here for detailed installation instructions.

Build from Docker registry (Recommended)

Just :

sudo docker pull nov3mb3r/dft:latest

Simple isn't it?

Run

To deploy a container from the created image :

sudo docker run -it nov3mb3r/dft /bin/ash

Access your case files with a shared folder between your working directory and the container.

Make sure you don't spoil your evidence files, by granting read-only permissions to the container.
$ sudo docker run -it -v ~/cases:/cases:ro nov3mb3r/dft /bin/ash 

DISCLAIMER

Every tool included in the build is shipped AS IS, created by their respective owners.

About

Collection of DFIR tools incirporated all in one docker image

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published