Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/teamdfir/sift-saltstack

Salt States for Configuring the SIFT Workstation
https://github.com/teamdfir/sift-saltstack

configuration-management forensics saltstack sans sift

Last synced: about 6 hours ago
JSON representation

Salt States for Configuring the SIFT Workstation

Awesome Lists containing this project

README

        

# SIFT

Built with [SaltStack](https://saltproject.io) installed with [Cast](https://github.com/ekristen/cast)

## Issues

Please open issues over at the [SIFT Repository](https://github.com/sans-dfir/sift/issues/new?title=[SALTSTACK]%20-) with prefix '[SALTSTACK]'

## Supported Distributions

* Ubuntu 20.04 (Focal) (deprecated)
* Ubuntu 22.04 (Jammy)

## Installation

Use [cast](https://github.com/ekristen/cast), it has replaced the [sift-cli](https://github.com/sans-dfir/sift-cli) tool.

You must install cast on your system, then it's as simple as run the following command ...

```console
sudo cast install teamdfir/sift-saltstack
```

**Note:** If you want server only mode throw `--mode=server` on the command.

### About Cast

Cast is the successor to the SIFT CLI. It is designed to be a distro agnostic installation tool. It leverages saltstack still under the hood to do the installation but makes it possible to build more distros quicker and easier. It supports SIFT and REMnux out of the box. Cast comes with a set of publishing tools as well to make releasing newer versions of distros easier.

Cast is a single binary written in golang instead of node.js that is cross platform compatible, this means eventually it can install distributions on Windows or ARM64 systems as well.

Finally, Cast leverages a the single binary method of install on linux for SaltStack, this means no left over salt subsystem on the host.