nov3mb3r/dft repository overview

⁠dFT

⁠docker Forensic Toolkit

Fast and lightweight docker image with the most popular and widely used open-source forensic tools

⁠Overview

The Docker image is based on Alpine Linux⁠, the most lightweight linux container distribution.

⁠Install Docker

Wait! It's dangerous to go alone!

Make sure you have the Docker engine installed. Click here⁠ for detailed installation instructions.

⁠Build from Docker registry (Recommended)

Just :

sudo docker pull nov3mb3r/dft:latest

Simple isn't it?

⁠Run

To deploy a container from the created image :

sudo docker run -it nov3mb3r/dft /bin/ash

Access your case files with a shared folder between your working directory and the container.

⁠Make sure you don't spoil your evidence files, by granting read-only permissions to the container.

$ sudo docker run -it -v ~/cases:/cases:ro nov3mb3r/dft /bin/ash 

⁠DISCLAIMER

Every tool included in the build is shipped AS IS, created by their respective owners.