[sleuthkit-users] Introducing Amele : Next-Gen Open-Source Digital Forensics & Incident Response En
Brought to you by:
carrier
|
From: melihemik <mel...@pr...> - 2026-09-06 16:29:33
|
Hello, In digital forensics and incident response (DFIR) operations, speed, cryptographic evidence integrity, and cross-platform flexibility are paramount. We are thrilled to officially introduce Amele β a high-performance, modern open-source DFIR platform. π What is Amele? Amele is a fast, memory-safe, Rust-powered digital forensics and incident response platform designed for field investigators, security researchers, and sysadmins. It facilitates dead & live forensic acquisitions across servers, endpoints, mobile devices, and containers while rigorously adhering to the RFC 3227 order of volatility. β‘ Key Capabilities * π§ Linux Forensics: Live physical memory acquisition (/proc/kcore, LiME), raw disk imaging, and agentless Zero-Disk SSH streaming (operating strictly in RAM without writing artifacts to target storage). * πͺ Windows Forensics: Kernel-level raw memory dumps, \\.\PhysicalDriveX physical disk acquisitions, and Volume Shadow Copy (VSS) extraction. * π± Android & iOS Mobile Forensics: ADB logical extractions, dangerous permission auditing, proprietary Android MFT parsing, root detection, and iOS Manifest.db backup normalization & jailbreak forensics. * π³ Docker & Cloud Forensics: Filesystem drift detection against base images and automated scanning for leaked credentials/tokens in container environments. * π¦ Tamper-Evident Case Packaging (.amelecase): Bundles all raw images, metadata, analyst notes, and SHA-256 manifests into verified, cryptographically signed case archives. * π€ AI Agent Ready (SKILL.md): Full operational specification for autonomous LLMs and agentic workflows. * π₯οΈ Multi-Interface Support: Unified CLI for terminal scripting, Native Desktop UI (amele ui), and Browser Debug mode (amele ui-browser). π Links: * π Official Website: https://amele.noirlang.tr * π GitHub Repository: https://github.com/noirlang/amele Best regards, Melih Emik Sent with Proton Mail secure email. |