automated-forensic-orchestrator-for-amazon-ec2

What the README says you get

• Other
  EC2 instance isolationenable isolation of the affected EC2 instances, EKS clusters, data volumes
• Other
  Memory and disk imagingcapture memory and disk images to secure storage
• Other
  Automated forensic workflowautomated orchestration workflow
• Other
  Forensic reportinggenerates a forensic report about the security breach
• Other
  Multi-account multi-region analysisacross multi-account and multi-region environments
• Other
  Serverless architecturehighly available, resilient, and serverless architecture
• Other
  EKS cluster forensicscapture and examine data from EC2 instances or EKS Clusters
• Other
  Automated investigation toolstrigger automated actions or tools for investigation and analysis
• Other
  Progress notificationsnotifies and reports on its progress, status, and findings
• Other
  Forensic analysis AMIAmazon Linux 2023 forensic analysis AMI built by `ForensicImageBuilderStack`
• Other
  LiME memory acquisitionLinux memory is acquired by whichever of two independent tools
• Other
  AVML memory acquisitionre-acquires with AVML
• Other
  Windows Server 2019 supportverified end to end on Server 2019

Extracted from the kit's README by a local AI model (deepseek-flash) on Sep 29, 2026. Every item is checked against an exact README quote; 1 unverifiable item was discarded. A README claim is the maker's description, not something we tested.