Results for “ftk-imager”

Investigate compromised Docker containers by analyzing images, layers, volumes, logs, and runtime artifacts to identify malicious activity and evidence.

Harden container images by minimizing attack surface, removing unnecessary packages, implementing multi-stage builds, configuring non-root users, and applying CIS Docker Benchmark recommendations.

Builds machine and container images with HashiCorp Packer, including Docker images locally without cloud resources.

Executes Atomic Red Team tests mapped to MITRE ATT&CK techniques, performs coverage gap analysis, and runs detection validation loops to measure blue team visibility.

Scan container images for known vulnerabilities using Anchore Grype with SBOM-based matching and configurable severity thresholds.