daguy666 / transit Goto Github PK
View Code? Open in Web Editor NEWMacOS incident Response Toolkit. Mostly written while stuck on a NJTransit train.
License: MIT License
MacOS incident Response Toolkit. Mostly written while stuck on a NJTransit train.
License: MIT License
document the libraries that may need to be installed.
For this to be complete a section needs to be added to list the prerequisites.
Monitor atq
Running atq
will dump the at
tasks for the logged in user.
Iterate over all the users and run atq
Example:
❯ echo 'open ~' | at now +10 minutes ─╯
job 1 at Wed Feb 17 18:55:00 2021
❯ atq ─╯
1 Wed Feb 17 18:55:00 2021
In utils/versions.py
add support for os version mojave.
Something like
{'mojave': ['10.14.0',
'10.14.1',
'10.14.2',
'10.14.3',
'10.14.4',
'10.14.5',
'10.14.6',
'10.14.7']
}
Python 2.7.10 (default, Aug 17 2018, 19:45:58)
[GCC 4.2.1 Compatible Apple LLVM 10.0.0 (clang-1000.0.42)] on darwin
Type "help", "copyright", "credits" or "license" for more information.
>>> import helper
Traceback (most recent call last):
File "<stdin>", line 1, in <module>
File "helper.py", line 7, in <module>
from logger import LOGGER
File "logger.py", line 10, in <module>
LOG2FILE = logging.FileHandler('./log/incidentR.log')
File "/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/logging/__init__.py", line 911, in __init__
StreamHandler.__init__(self, self._open())
File "/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/logging/__init__.py", line 941, in _open
stream = open(self.baseFilename, self.mode)
IOError: [Errno 2] No such file or directory: '/Users/daguy666/git/Transit/utils/log/incidentR.log'
the path should be /Users/<username>/git/Transit/log/incidentR.log
If en0
is not the default wireless interface.
Traceback (most recent call last):
File "./main.py", line 73, in <module>
IS.main()
File "/Users/<username>/git/Transit/utils/info_scan.py", line 48, in main
self.build_up_system_info()
File "/Users/<username>/git/Transit/utils/info_scan.py", line 41, in build_up_system_info
for wifi in self.gsi.return_wireless_networks():
TypeError: 'NoneType' object is not iterable
Write up a feature to aim at a different directory. Suppose you mount a disk image and you want to run this against a different target or directory.
/Volumes/dfir_image
Write a method to check for any tmux sessions.
Add some error checking for
git/Transit $ tmux
-bash: tmux: command not found
Return an exception if command not found.
The following bash commands
$ last reboot
reboot ~ Fri Jan 5 19:30
reboot ~ Thu Sep 28 14:08
reboot ~ Thu Sep 28 12:53
wtmp begins Thu Sep 28 12:53
$ last shutdown
shutdown ~ Thu Jan 25 22:51
wtmp begins Wed Jan 24 20:23
Apply these to the Transit/utils/helper.py
in the Gather_System_Info()
Class
They can be broken down into two methods or one, no preference.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.