SIFT

This is a metadata repository that is primarily used for discussiosn and issue tracking.

cast -- installer cli
saltstack -- states that actually do the work
packer -- builds machine images using the above tools
package-scripts -- builds certain packages hosted in SIFT PPA

Supported Distros

20.04 Ubuntu (Focal)
22.04 Ubuntu (Jammy)

Installation

Cast is the replacement to the SIFT CLI. While the SIFT CLI should continue to work it is officially deprecated as of March 1, 2023 and will no longer be guaranteed to work after that date.

You must first install the CLI tool, then you can install SIFT.

sudo cast install teamdfir/sift-saltstack

Cloud Providers

AWS

These are the latest AMIs build from sift-packer

Note: these are headless, as in no GUI, it installs the server variant of SIFT.

22.04 Jammy Images

Default User: sansforensics

Account ID: 469658012540
Name: sans-sift-workstation-server-20240214124249
Regions:
  - eu-west-1 -> ami-02b8801c5dd864319
  - ap-southeast-1 -> ami-0a89fcec3f0d654f9
  - us-west-1 -> ami-0443a8664211c05f0
  - us-east-2 -> ami-04d0b46b95f792b67
  - ap-northeast-3 -> ami-049c6d359a6b056cc
  - eu-north-1 -> ami-00c969795f1510155
  - ap-northeast-2 -> ami-0d87d93a9fa3793e2
  - ca-central-1 -> ami-075fc1cf4efb61867
  - eu-west-3 -> ami-073eaa4931bcd39eb
  - eu-west-2 -> ami-0c494a1b9f9e341b1
  - eu-central-1 -> ami-0a50e71994d4ec832
  - ap-southeast-2 -> ami-0a52aae3e9bb5ff98
  - us-west-2 -> ami-0a6077f47a38022b7
  - us-east-1 -> ami-033658932fa06b1e6
  - ap-northeast-1 -> ami-09176a630354099ad

20.04 Focal Images

Built On: March 2nd, 2022