Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
nbareil authored Jul 23, 2024
1 parent 345a820 commit 9c6bde7
Showing 1 changed file with 10 additions and 2 deletions.
12 changes: 10 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,11 +4,19 @@ Spawn a complete forensics environment in a reproducible way. Read its [associat

## Usage

### In a nix-enabled, CERT-connected environment
### In a nix-enabled, Internet-connected environment

```
$ git clone https://github.com/airbus-cert/nix-forensics.git
$ cd nix-forensics
$ nix-shell
```
[nix-shell:~/nix-forensics-public]$ regrippy --list|head
- auditpol(SECURITY): Get the advanced security audit policy settings
- compname(SYSTEM): Returns the computer name
- env(['SYSTEM', 'SOFTWARE', 'NTUSER.DAT']): Lists all environment variables
- filedialogmru(NTUSER.DAT): Reads OpenSaveMRU and LastVisitedMRU keys
- gpo(['SOFTWARE', 'NTUSER.DAT']): list all GPOs applied on this system
- kb(SOFTWARE): get all KB update installation status```
This will build all required tools, both public and private ones, and put you in a shell where they're all ready to use.
Expand Down

0 comments on commit 9c6bde7

Please sign in to comment.