dFT

docker Forensic Toolkit

Fast and lightweight docker image with the most popular and widely used open-source forensic tools

Overview

The Docker image is based on Alpine Linux, the most lightweight linux container distribution.

Install Docker

Wait! It's dangerous to go alone!

Make sure you have the Docker engine installed. Click here for detailed installation instructions.

Build from Docker registry (Recommended)

Just :

sudo docker pull nov3mb3r/dft:latest

Simple isn't it?

Run

To deploy a container from the created image :

sudo docker run -it nov3mb3r/dft /bin/ash

Access your case files with a shared folder between your working directory and the container.

Make sure you don't spoil your evidence files, by granting read-only permissions to the container.

$ sudo docker run -it -v ~/cases:/cases:ro nov3mb3r/dft /bin/ash 

DISCLAIMER

Every tool included in the build is shipped AS IS, created by their respective owners.