Tools that need to be manually enabled - reuteras/dfirws GitHub Wiki

The following tools have to be manually enabled in setup\config.txt or installed with dfirws-install.ps1:

  • apimonitor - set $WSDFIR_APIMONITOR="Yes" to install it every time or run dfirws-install.ps1 --apimonitor
  • cmder - set $WSDFIR_CMDER="Yes" to install it every time or run dfirws-install.ps1 --cmder
  • KAPE - set $WSDFIR_KAPE="Yes" to install it every time or run dfirws-install.ps1 --kape
  • LibreOffice - set $WSDFIR_LIBREOFFICE="Yes" to install it every time or run dfirws-install.ps1 --libreoffice
  • Loki - set $WSDFIR_LOKI="Yes" to install it every time or run dfirws-install.ps1 --loki
  • neo4j - set $WSDFIR_NEO4J="Yes" to install it every time or run dfirws-install.ps1 --neo4j
  • Obisidian - set $WSDFIR_OBSIDIAN="Yes" to install it every time or run dfirws-install.ps1 --obsidian
  • QEMU - set $WSDFIR_QEMU="Yes" to install it every time or run dfirws-install.ps1 --qemu
  • Visual studio code - set $WSDFIR_VSCODE="Yes" to install it every time or run dfirws-install.ps1 --vscode
  • Zui - set $WSDFIR_ZUI="Yes" to install it every time or run dfirws-install.ps1 --zui

Programming languages:

  • GoLang - run dfirws-install.ps1 --golang
  • Node - run dfirws-install.ps1 --node
  • Ruby - run dfirws-install.ps1 --ruby
  • Rust - run dfirws-install.ps1 --rust

Python, PHP, PowerShell and Perl are always available in the Sandbox

Other programs:

  • Autopsy - run dfirws-install.ps1 --autopsy
  • Bash extra tools - run dfirws-install.ps1 --bashextra