nov3mb3r/dfir repository overview

⁠dfir

Collection of the most popular and widely used open-source forensic tools in a lightweight and fast docker image.

⁠Run

To deploy a container from the created image :

sudo docker run -it nov3mb3r/dfir /bin/ash

Access your case files with a shared folder between your working directory and the container.

⁠Make sure you don't spoil your evidence files, by granting read-only permissions to the container.

$ sudo docker run -it -v ~/cases:/cases:ro nov3mb3r/dfir /bin/ash