Tuesday, December 7, 2021

acquire-aws-ec2: A python script to acquire multiple AWS EC2 instances in a forensically sound-ish way

The script acquire_ec2.py is used to automatically acquire AWS EC2 instances. The script needs to be run on an EC2 instance in the same region as the EC2 instances that should be acquired. It was developed for forensic acquisition if an analyst wants to apply traditional forensic analysis of AWS EC2 instances. It was developed for internal use by a former DT-Sec employee. No guarantees are made

Acquisition Process

Since there is no export functionality available in neither the AWS console nor …

Read More

Latest news
Related news