Scope Forensics
Scope is an open source cloud forensic tool to conduct rapid incident responce in AWS, GCP and Azure environments.
Overview
Documentation
Getting Started with Scope
Installation Using pip (Recommended) pip install scope-forensics From Source # Clone the repository git clone https://github.com/scope-forensics/scope.git cd scope # Install the package pip install . # For development (editable mode) pip install -e . Usage Basic Commands # Display help information scope --help # List available commands scope aws --help
AWS
AWS Documentation Welcome to the Scope AWS documentation section. This section will guide you through connecting AWS to Scope and getting the necessary data to start analyzing your AWS environment. AWS Permissions AWS Authentication Discover CloudTrail Trails Explore S3 Bucket Structure Collect Management Events Collect from S3 Collect from Local Files Exporting Timelines AWS Permissions To use Scope effectively, you’ll need an AWS user with appropriate permissions. Here’s how to create one:
Analysis
Commence Analysis Comming Soon!
Detections
Detections Comming Soon!
