US Army Releases Code For Internal Forensics Framework
An anonymous reader writes: The U.S. Army Research Laboratory in Maryland has released on GitHub a version of a Python-based internal forensics tool which the army itself has been using for five years. Dshell is a Linux-based framework designed to help investigators identify and examine compromised IT environments. One of the intentions of the open-sourcing of the project is to involve community developers in the creation of new modules for the framework. The official release indicates that the version of Dshell released to Github is not necessarily the same one that the Army uses, or at least that the module package might be pared down from the Army-issued software.
I'm not sure that I trust this "open source" code from, of all places the US Army, available on Github. Does anyone have a compiled binary for Kubuntu that I could try?
It is dangerous to be right when the government is wrong.
Wow, the same guys? I didn't know Python coders were that active. Color me impressed.
If instead of developing from the ground up they had simply invested their time and effort into enhancing an already existing project that already does more.. https://www.bro.org/