Skip to content
This repository has been archived by the owner. It is now read-only.
master
Switch branches/tags
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 
 
 
 
 
 
 

Squid Cache Extractor

Forensic artifact extraction from squid3 proxy cache and secondary log sources.

  • Parse headers and metadata from cached files residing in a squid cache_dir
  • Parse metadata from binary cache index cache_dir/swap.state
  • Parse secondary log data from squid store.log file

Usage

Dependencies

Functions

cache-extractor

parse-swap-state

parse-store-log

Output

json and csv output is designed to be indexed by log aggregation storage & visualization utlities such as elasticseach/kibana. See squid-cache-extractor-logstash

About

Forensic artifact extraction from squid proxy cache and secondary log sources

Resources

License

Releases

No releases published

Packages

No packages published

Languages