shadawck / awesome-anti-forensic Goto Github PK

BusKill is an open-source hardware and software project that uses a hardware tripwire/dead-man-switch (a usb cable with a magnetic breakaway) to trigger your computer to lock or shutdown if the user is physically separated from their machine.

• https://github.com/BusKill/buskill-app

The following guide describes how BusKill can be configured to wipe the LUKS Header (containing the FDE key) and its metadata. It shows a video demo where the machine wiped the keys & powered-off in <6 seconds, and it includes a post-execution forensic analysis in Kali with bulk_extractor

• https://www.buskill.in/luks-self-destruct/

Please consider adding this tool to your awesome-forensics list

hdpram should be hdparm, I made a pull request with the typo fixed

:) 🟢

Thanks for adding BusKill in #3 :)

I realized that I have been tracking a bunch of other tools related in our BusKill docs, and all of them are great candidates for this awesome-anti-forensic list

• https://docs.buskill.in/buskill-app/en/stable/attribution.html#similar-projects

1. USB Kill
2. USB Death
3. Silk Guardian
4. Day Tripper
5. USBGuard
6. suicideCrypt
7. panic_bcast
8. Nuke My LUKS
9. luksAddNuke
10. cryptsetup-nuke-keys
11. TAILS Memory Erasure
12. TEDD (Transparent Emergency Data Destruction)
13. s53
14. swatd
15. Centry
16. xxUSBSentinel
17. Ripple

Would you be open to adding these and also grouping them in a distinct category of tools that are designed specifically to execute an emergency wipe after being triggered by some hardware tripwire? I'd call the new category Emergency Tripwire Tools or similar.