Because .idb
files should be version controlled.
Large binary files like pcap
files don’t belong in git. The repository will
slow down once it reaches a few gigabytes. To avoid pushing pcap
files by
mistake the pcaps/
directory is ignored in .gitignore
.
-
Fork this repository using github or via command-line (specify investigation name):
git clone https://github.com/GoSecure/malware_investigation_template.git Win32.Bad.A cd Win32.Bad.A
-
Configure where the
pcaps
will be rsync’edecho 'PCAP_DST=<rsync path spec>' > .config.sh
-
Get rid of original
.git
metadata and initialize new git treerm -r .git/ git init
Voilà!
Note
|
Forks of public repositories can’t be made private on github. It is advised to use the command-line and push to a private repo if you plan on hosting your analysis on github. |
I don’t think this is copyright’able because it is just a bunch of directory names, some documentation and a small script but just in case, here we go:
Under CC0 license: https://creativecommons.org/publicdomain/zero/1.0/ To the extent possible under law, GoSecure Inc. has waived all copyright and related or neighboring rights to this repository's content.