| Name : docker-forensics-toolkit
| |
| Version : 0.2.0
| Vendor : cert_org
|
| Release : 2.fc28
| Date : 2020-07-20 16:30:00
|
| Group : Applications/Forensics Tools
| Source RPM : docker-forensics-toolkit-0.2.0-2.fc28.src.rpm
|
| Size : 6.04 MB
| |
| Packager : Lawrence R_ Rogers (lrr_cert_org)
| |
| Summary : docker-forensics-toolkit - toolkit for performing post-mortem analysis of Docker runtime environments
|
Description :
This package contains a toolkit for performing post-mortem analysis of Docker runtime environments based on forensic HDD copies of the docker host system.
Features:
* mount-image - Mounts the forensic image of the docker host
* status - Prints status information about the container runtime
* list-images - Prints images found on the computer
* show-image-history - Displays the build history of an image
* show-image-config - Pretty prints the full config file of an image
* list-containers - Prints containers found on the computer
* show-container-log - Displays the latest container logfiles
* show-container-config - Pretty prints the combined container specific config files (config.v2.json and hostconfig.json).
* mount-container - Mounts the file system of a given container at the given location (overlay2 only)
* macrobber-container-layer - Extracts file system metadata from the container layer of the given container. Use the output with the \'mactime\' tool to create a timeline.
* macrobber-volumes - Extracts file system metadata from the volumes of the given container. Use the output with the \'mactime\' tool to create a timeline.
* carve-for-deleted-docker-files - Carves the image for deleted Docker files, such as container configs,Dockerfiles and deleted log files. Requires \'scalpel\' to be installed.
|
RPM found in directory: /mirror/vol2/forensics.cert.org/fedora/cert/28/x86_64 |
Hmm ... It's impossible ;-) This RPM doesn't exist on any FTP server
Provides :
docker-forensics-toolkit
docker-forensics-toolkit(x86-64)
Requires :
