docker-explorer
docker-explorer copied to clipboard
google
A tool to help forensicate offline docker acquisitions
Hello, i have one running windows container in windows machine. i took the volume of the windows machine and trying to mount the running container,i see below error. de.py -r...
See https://github.com/log2timeline/l2tdevtools/issues/666
Source: https://www.slideshare.net/JoelLathrop2/docker-forensics Once LVM has settled: ``` cont_id="whatevs" m=$(cat /var/lib/docker/image/devicemapper/layerdb/mounts/$cont_id/mount-id) $d=$(jq ".device_id" /var/lib/docker/devicemapper/metadata/$m) $size=$(jq ".size" /var/lib/docker/devicemapper/metadata/$m) dmsetup create thin-$cont_id --table "0 $s thin /dev/mapper/docker-thinpool $d" mount -o ro,nouuid /dev/mapper/thin-$cont_id /mnt/$cont_id/...
- [ ] Split tests - [ ] Make tests docstrings more descriptive - [x] Add end to end tests - [ ] Rename docker_version to storage_version - [ ]...
Currently, only the first operation on a image is displayed
It would be nice to have a `--mount-all` that would mount the FS of all container to given directory, e.g. `/mnt/docker-all/container1`, `/mnt/docker-all/container2`, etc.
# Patching CVE-2007-4559 Hi, we are security researchers from the Advanced Research Center at [Trellix](https://www.trellix.com). We have began a campaign to patch a widespread bug named CVE-2007-4559. CVE-2007-4559 is a...
Hi! I use VSCodium, and your extension is very important to me. Please publish docker-explorer in their store. I tried to install manually via .vsix file but after reloading IDE...
Ran the following using the "list all_containers": > python3 /usr/local/bin/de.py -r /mnt/flash/drive/var/lib/docker list all_containers ``` Traceback (most recent call last): File "/usr/local/bin/de.py", line 275, in DockerExplorerTool().Main() File "/usr/local/bin/de.py", line 264,...
