We had a jam packed Forensic Lunch today with a portion of the Google IR team today talking all about the open source tools they develop, use and support in their work at Google.
Specifically we had :
Mikhail Bushkov giving a big update on GRR https://github.com/google/grr Johan Berggren (https://twitter.com/jberggren) and Kristinn Gudjonsson (https://twitter.com/el_killerdwarf) talking about Timesketch and Data science https://github.com/google/timesketch Aaron Peterson (https://twitter.com/aarontpeterson) talking about Turbinia https://github.com/google/turbinia Thomas Chopitea (https://twitter.com/tomchop_) talking about DTTimewolf https://github.com/log2timeline/dftimewolf Theo Giovanna talking about libcloudforensics aka cloudforensicutils https://github.com/google/cloud-forensics-utils/tree/master/libcloudforensics Joachin Metz (https://twitter.com/joachimmetz) - Talking about Plaso, libntfs and Libyal Plaso: https://github.com/log2timeline/plaso Libfsntfs: https://github.com/libyal/libfsntfs Libyal: https://github.com/libyalJoin them on the Open Source DFIR Slack: https://join-open-source-dfir-slack.herokuapp.com/
Read more about what they are doing on the Open Source DFIR Blog: https://osdfir.blogspot.com/
