Skip to content

Tag Selfie's Forensic Instance Image Snapshots with Origin Account, Forensics Account and Snapshot TimeStamp #4

@DLSieving

Description

@DLSieving

Context: Running selfie.

Environment: Postmortem analysis using the dso-bootcamp-forensics account.

Use Case: Making forensic instance image snapshots using selfie.

Problem: The forensics investigator may not know the origin and context of the instance image snapshot under investigation.

Scope: Add resource tags to the forensics image snapshot.

New Functionality: Tag the forensic instance images created by selfie to allow the forensics investigator to understand the origin and context of the instance under investigation. Tags to be considered at present include but are not limited to:

  • Instance origin account (selfie calls this the target_account)
  • Investigator's forensics account (selfie calls this the forensic_account)
  • Timestamp indicating when the image snapshot was created.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions