{"id":18291365,"url":"https://github.com/jpcertcc/memoryforensic-on-cloud","last_synced_at":"2025-04-05T10:31:01.888Z","repository":{"id":97103529,"uuid":"555406411","full_name":"JPCERTCC/MemoryForensic-on-Cloud","owner":"JPCERTCC","description":"Memory Forensic System on Cloud","archived":false,"fork":false,"pushed_at":"2023-12-21T01:21:08.000Z","size":439,"stargazers_count":89,"open_issues_count":0,"forks_count":7,"subscribers_count":11,"default_branch":"main","last_synced_at":"2025-03-21T03:03:35.178Z","etag":null,"topics":["aws","forensics","terraform","volatility"],"latest_commit_sha":null,"homepage":"","language":"HTML","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/JPCERTCC.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2022-10-21T14:12:50.000Z","updated_at":"2025-02-20T05:12:44.000Z","dependencies_parsed_at":"2023-12-21T05:02:08.374Z","dependency_job_id":null,"html_url":"https://github.com/JPCERTCC/MemoryForensic-on-Cloud","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JPCERTCC%2FMemoryForensic-on-Cloud","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JPCERTCC%2FMemoryForensic-on-Cloud/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JPCERTCC%2FMemoryForensic-on-Cloud/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JPCERTCC%2FMemoryForensic-on-Cloud/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/JPCERTCC","download_url":"https://codeload.github.com/JPCERTCC/MemoryForensic-on-Cloud/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247324544,"owners_count":20920671,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","forensics","terraform","volatility"],"created_at":"2024-11-05T14:14:01.342Z","updated_at":"2025-04-05T10:31:01.370Z","avatar_url":"https://github.com/JPCERTCC.png","language":"HTML","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Memory Forensic on Cloud\n\nThis repository is a PoC for memory forensic on AWS.\n\n![flow](images/flow.png)\n\n## Support OS\n\nThis system only supports memory forensics on Windows OS.\n\n## Requirements Service\n\nGet an account for the following services.\n\n* AWS\n* GitHub\n\n## How to Use\n\n### Clone or Fork This Repository\n\n```bash\n$ git clone https://github.com/JPCERTCC/MemoryForensic-on-Cloud.git\n```\n\n### Setup Configuration\n\n#### variables.tf\n\n```python\n# Region to build the system\nvariable \"region\" {\n  default = \"us-east-1\"\n}\n\n# Docker image name\nvariable \"image_name\" {\n  default = \"memory-analysis\"\n}\n\n# Dockerfile directory\nvariable \"docker_dir\" {\n  default = \"docker\"\n}\n\n# Analysis script directory\nvariable \"codecommit_dir\" {\n  default = \"analysis_script\"\n}\n\n# Username to commit to Codecommit\nvariable \"codecommit_username\" {\n  default = \"terraformer\"\n}\n\n# E-mail to commit to Codecommit\nvariable \"codecommit_email\" {\n  default = \"test@example.com\"\n}\n\n# System name to build on AWS\nvariable \"app_name\" {\n  default = \"memory-analysis\"\n}\n\n# IP address to access API Gateway and S3\nvariable \"trusted_ip\" {\n  default = \"192.168.1.1/32\"\n}\n\n# Network address used by VPC\nvariable \"cidr_block_vpc\" {\n  default = \"172.20.0.0/16\"\n}\n\n# AWS access key\nvariable \"aws_access_key_id\" {\n  default = \"\"\n}\n\n# AWS secret access key\nvariable \"aws_secret_access_key\" {\n  default = \"\"\n}\n\n# E-mail to notify the analysis status\nvariable \"sns_email\" {\n  default = \"\"\n}\n\n\n```\n\n### Setup GitHub Actions\n\nSet GitHub Actions secrets.\n\n* AWS_ACCESS_KEY_ID\n* AWS_SECRET_ACCESS_KEY\n* AWS_ACCOUNT_NUMBER\n* AWS_REGION\n\nHow to use GitHub Actions secrets. https://docs.github.com/en/actions/security-guides/encrypted-secrets\n\nFinally, commit the repository to GitHub.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjpcertcc%2Fmemoryforensic-on-cloud","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fjpcertcc%2Fmemoryforensic-on-cloud","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjpcertcc%2Fmemoryforensic-on-cloud/lists"}