Tags

Tags give the ability to mark specific points in history as being important

2025-4

260c2cb0 · Create a latest version for easier singular tool access · Oct 29, 2025

Release: Release 2025-4

- Updated software as of 28-10-2025
  - base images
  - volatility, trivy, tracee, ptcpdump, ecapture, uac, coreutils, binutils, avml
- Re-arranged cern modules (hidden-module-finder, proc hiden trigger)
- Added cern-beta-rkfinder (to test out)
- Added gdb-static from external project
- Added yara

2025-3

d23e812a · Added zippapp version of volatility + dwarf2json · Mar 12, 2025

Release: Release 2025-3

- Includes new sleuthkit from development branch with experimental minimal support for XFS.
- Compiling sleuthkit from git sources, using alpine image.
- Added volatility (zipapp) and dwarf2json

2025-2

b81d5722 · Fixed falco docker-compose packaging · Feb 25, 2025

Release: Release 2025-2

- Contains new versions for the extra packages (trivy, tracee, ptcpdump, ecapture).
- Contains a docker-compose for falco  including tcp network monitoring.

2025-1

282c9479 · chkrootkit was not compiled statically · Feb 06, 2025

Release: Release 2025-1

First relased version of the tookit. This consists of a series of statically compiled binaries that can be useful to undergo a forensics investigation on linux systems.