https://github.com/desimic/ronin-forensics
ronin network attack - forensic analysis - osint investigation - crystal chain
https://github.com/desimic/ronin-forensics
architecture blockchain-investigation crypto crystal indicators-of-compromise osint secure
Last synced: 7 months ago
JSON representation
ronin network attack - forensic analysis - osint investigation - crystal chain
- Host: GitHub
- URL: https://github.com/desimic/ronin-forensics
- Owner: desimic
- Created: 2025-09-05T22:45:06.000Z (7 months ago)
- Default Branch: main
- Last Pushed: 2025-09-05T23:53:54.000Z (7 months ago)
- Last Synced: 2025-09-06T00:25:59.581Z (7 months ago)
- Topics: architecture, blockchain-investigation, crypto, crystal, indicators-of-compromise, osint, secure
- Homepage: https://github.com/desimic/Ronin-Forensics
- Size: 4.88 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Ronin Crypto Forensics Investigation Repository
This GitHub repo is structured for a full blockchain forensic investigation and OSINT automation pipeline for the Ronin Network exploit attributed to the Lazarus Group.
## 📁 Folder Structure
- `/reports` - Word/PDF incident reports, threat actor profiles, evidence logs
- `/diagrams` - Graph exports from Crystal, Maltego, and wallet cluster diagrams
- `/automation` - Python scripts for SpiderFoot automation, JSON ingest tools
- `/.github/workflows` - CI/CD actions to automate analysis, scans, and linting
## ⚙️ Visual Studio Code Setup
1. Open Visual Studio Code
2. Select `File > Open Folder` and choose this repository folder
3. Install recommended extensions (Python, GitHub Actions)
4. Activate your Python environment:
```bash
python3 -m venv venv
source venv/bin/activate
pip install -r automation/requirements.txt
```
## 🚀 GitHub Deployment
1. Push this folder to GitHub:
```bash
git init
git add .
git commit -m "Initial commit - Ronin Forensics Repo"
git remote add origin https://github.com/yourusername/ronin-forensics
git push -u origin main
```
2. Enable GitHub Pages or Actions if needed for automation.
## 📌 Notes
- You can extend this by integrating with MISP, PowerBI, or MITRE ATT&CK Navigator
- Use this with SpiderFoot, Crystal Blockchain, Chainalysis, or Maltego