docker-explorer
A forensic tool for exploring offline Docker container filesystems and metadata from disk images.
What is docker-explorer?
Docker Explorer is a forensic analysis tool that allows investigators to explore offline Docker container filesystems and metadata from disk images. It solves the problem of analyzing compromised containers without requiring a live Docker environment, enabling forensic examination of container layers, configurations, and file contents directly from host storage.
Digital forensics analysts, incident responders, and security researchers who need to investigate Docker container compromises or analyze container artifacts in offline disk images.
Developers choose Docker Explorer because it provides accurate, offline access to Docker container filesystems using the same layered view as a running container, integrates with forensic workflows, and eliminates dependence on live Docker daemons during investigations.
Overview
A tool to help forensicate offline docker acquisitions
Use Cases
Best For
- Forensic analysis of compromised Docker containers from disk images
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
