docker

$ target-query <path/to/target> -f docker

Details

Module	apps.container.docker.DockerPlugin
Output	records

Module documentation

Parse Docker Daemon artefacts.

References:

• https://didactic-security.com/resources/docker-forensics.pdf

• https://didactic-security.com/resources/docker-forensics-cheatsheet.pdf

• https://github.com/google/docker-explorer

Function documentation

This is a namespace plugin. This means that by running this plugin, it will automatically run all other plugins under this namespace:

• docker.containers

• docker.images

• docker.logs