turbinia
turbinia copied to clipboard
Automation and Scaling of Digital Forensics Tools
Right now artifacts are generated file by file, so that drastically increases the number of Tasks that get executed in cases where there are lots of files (e.g. HTTP logs)....
Currently the server keeps a stub for each task that gets executed so that it can check the state for these over time. If the server crashes this state gets...
We should update `update-gke-infra.sh` to send the initial non-log output to stderr so that we can still see the instance list and prompt but still be able to pipe or...
For some scenarios it would be nice to have a Task that can auto-upload files to Timesketch. We also have the GCS pubsub trigger mechanism that is in the Timesketch...
We have the vs code devcontainers for local development, and it would be super cool if we could have something similar for debugging in GCP. I'm not sure how that...
Getting this intermittently when trying to start tasks: ``` [ERROR] Failed to update task PlasoTask in datastore: 409 too much contention on these datastore entities. please try again. entity groups:...
The new `turbiniactl gcplogs` command is really great to have, and it would also be nice to be able to filter the output to make it a little easier to...
Both the local paths and the remote saved paths for evidence is saved as part of the task result. Depending on the configuration a path can also get saved twice....
Currently when starting the server/worker when configured to use Redis/Celery, it will indefinitely hang (or at least hang for a very long time, ie. several minutes) and it's not clear...
When you run `turbiniactl` with no arguments it will show the help as expected, but when you run it with `-c` to specify a config file to run with, it...