sift
sift copied to clipboard
teamdfir
SIFT
Does Sift-saltstack install python2 even though it is end of life? Where in the readme does it mention the location of any forums?
sudo ./cast install teamdfir/sift-saltstack Description: Ubuntu 22.04.4 LTS amd64 test_|-sift-python-packages_|-sift-python-packages_|-nop: __run_num__: 290 __sls__: sift.python-packages changes: {} comment: 'One or more requisite failed: sift.python-packages.volatility.sift-python-volatility-community-plugins, sift.python-packages.volatility.sift-python-volatility-plugins-firefoxhistory.py-absent, sift.python-packages.volatility.sift-python-volatility-plugins-autoruns.py-absent, sift.python-packages.volatility.sift-python-volatility-plugins-uninstallinfo.py-absent, sift.python-packages.volatility.sift-python-volatility-plugins-idxparser.py-absent, sift.python-packages.volatility.sift-python-volatility-plugins-editbox.py-absent, sift.python-packages.volatility.sift-python-volatility-sift-plugins, sift.python-packages.volatility.sift-python-volatility-mimikatz-plugin-update,...
Hi All, I am struggling to mount E01 images on the sift workstation using ewfmount. I get the below error:  I am so confused and not sure whats causing...
- [x] SIFT CLI replaced with [cast](https://github.com/ekristen/cast) - [ ] Figure out what packages do not support arm64
This is a pretty simple install with just one prereq, .Net6. 1. Install DotNet6 3. Add the aliases provided below t.o the user's aliases 4. create `/opt/zimmermantools` 5. Download `Get-ZimmermanTools.zip`...
I ran into this old issue today. https://github.com/teamdfir/sift/issues/9 The MFT isn't "visible" but as stated in the other thread, you can copy it out. I'm running SIFT installed via cast...
Hi, Is Autopsy 4 on the roadmap? Autopsy 2.24 is a bit long in the tooth. ~Salty
Could it be able to get SqliteBrowser installed in to the base setup? Two options 1. old but workable version ships with Ubuntu 22.04 2. add newest release with 3rd...
Review Dissect tool and add to SIFT: https://github.com/fox-it/dissect Company page on Dissect: https://www.fox-it.com/nl-en/dissect/ The team also presented at CyberThreat 2023 and would like to submit to DFIR Summit 2023 (US...
