US Army Releases Cyber-Forensic Code to Github

"The Army Research Laboratory (ARL) is releasing its cyber-forensic framework code publically to help others detect and understand cyber-attacks.

Dshell is a framework that users can leverage to develop custom analysis modules based on compromises they have encountered. Using the source code, developers can contribute to the project by adding modules that benefit others within the digital forensic and incident response community. Dshell has been used for nearly five years as a framework to help the U.S. Army understand the events of compromises of Department of Defense networks."