grr 0,2,5,2,4,0,13 travis-ci docker python

GRR Rapid Response: remote live forensics for incident response

2 years after Apache-2.0

GRR Rapid Response is an incident response framework focused on remote live forensics. [![Build Status](https://travis-ci.org/google/grr.svg?branch=master)](https://travis-ci.org/google/grr) [![Build status](https://ci.appveyor.com/api/projects/status/o30jv69p5muc12r5?svg=true)](https://ci.appveyor.com/project/destijl/grr) * [Quickstart: Fast automated installation](https://github.com/google/grr-doc/blob/master/quickstart.adoc) * [User Manual](https://github.com/google/grr-doc/blob/master/user_manual.adoc) * [Blog](http://grr-response.blogspot.com/) * [Administration Documentation (Setup and Configuration)](https://github.com/google/grr-doc/blob/master/admin.adoc) * [Publications: Papers, Presentations, Workshops etc.](https://github.com/google/grr-doc/blob/master/publications.adoc) * [Project FAQ](https://github.com/google/grr-doc/blob/master/faq.adoc) * [Developer and Implementation Documentation](https://github.com/google/grr-doc/blob/master/implementation.adoc) * [The GRR Configuration system](https://github.com/google/grr-doc/blob/master/configuration.adoc) * [Release Notes: check these when upgrading](https://github.com/google/grr-doc/blob/master/releasenotes.adoc) * [Project Roadmap](https://github.com/google/grr-doc/blob/master/roadmap.adoc) * [Search Documentation (using github search)](https://github.com/google/grr-doc) * [License Information](https://github.com/google/grr-doc/blob/master/licenses.adoc) * [Troubleshooting](https://github.com/google/grr-doc/blob/master/troubleshooting.adoc) GRR is a python agent (client) that is installed on target systems, and python server infrastructure that can manage and talk to the agent.
Client Features: * Cross-platform support for Linux, OS X and Windows clients. * Live remote memory analysis using open source memory drivers for Linux, OS X and Windows via the [Rekall](http://www.rekall-forensic.com/) memory analysis framework. * Powerful search and download capabilities for files and the Windows registry. * Secure communication infrastructure designed for Internet deployment. * Client automatic update support. * Detailed monitoring of client CPU, memory, IO usage and self-imposed limits. Server Features: * Fully fledged response capabilities handling most incident response and forensics tasks. * OS-level and raw file system access, using the SleuthKit (TSK). * Enterprise hunting (searching across a fleet of machines) support. * Fully scalable back-end to handle very large deployments. * Automated scheduling for recurring tasks. * Fast and simple collection of hundreds of digital forensic artifacts. * Asynchronous design allows future task scheduling for clients, designed to work with a large fleet of laptops. * AngularJS Web UI and RESTful JSON API. * Fully scriptable IPython console access. * Basic system timelining features. * Basic reporting infrastructure. See [quickstart](https://github.com/google/grr-doc/blob/master/quickstart.adoc) to start using it. Contact Us ---------- Mailing lists: * GRR Users: [grr-users](https://groups.google.com/forum/#!forum/grr-users) * GRR Developers: [grr-dev](https://groups.google.com/forum/#!forum/grr-dev) Follow us [on twitter](https://twitter.com/grrresponse) for announcements of GRR user meetups. We use [a gitter chat room](https://gitter.im/google/grr) during meetups. Screenshots ----------- [](https://github.com/google/grr/blob/gh-pages/screenshots/Screenshot%20from%202013-11-18%2018-36-13.png) [](https://github.com/google/grr/blob/gh-pages/screenshots/Screenshot%20from%202013-11-18%2018-36-46.png) [](https://github.com/google/grr/blob/gh-pages/screenshots/Screenshot%20from%202013-11-18%2018-37-37.png) [](https://github.com/google/grr/blob/gh-pages/screenshots/Screenshot%20from%202013-11-18%2018-40-49.png) [](https://github.com/google/grr/blob/gh-pages/screenshots/Screenshot%20from%202013-11-18%2018-41-45.png)

Related Repositories

limacharlie

limacharlie

Endpoint monitoring stack. ...

granary2

granary2

Granary dynamic binary translation system. ...

grrdemos

grrdemos

Project for documenting GRR Demonstrations ...

grr-support

grr-support

Tools for interacting with GRR ...

project-GRR

project-GRR

Advanced RSS Engine (Google-Reader-ish replacement) ...


Top Contributors

pidydx destijl grrrrrrrrr dionyziz darrenbilby bgalehouse mbushkov scudette jessicawilsonsc parkisan andrewkrug adamchainz defaultnamehere andrewseidl chlunde marpaia nawien-sharma pchaigno RyPeck tbartlett0

Releases

-   v3.1.0.2 zip tar
-   v3.1.0rc1 zip tar
-   v0.3.0-7-docker zip tar
-   v0.3.0-6 zip tar
-   3.1.0rc2 zip tar