Amazon Linux 2

[dfir-man131]

Any plans to update the ko repo to support Amazon Linux 2 and a few other more updated AMIs? If no, looking for suggestions on workarounds (other than manually inputting a manually generated ko file).

[andrewkrug]

You may notice I've not given this project some love in a while. We had some major issues with kernel 4.x and higher due to ASLR. I'll flag this for follow up to see if the state of the analysis tools / LiME have moved forward. Without advancement in underlying tooling it might be impossible.

[jicowan]

@andrewkrug It appears that I've run into a similar issue with AL2 and the Linux kernel (5.4).

margaritashotgun --server ip-x-x-x-x.us-east-2.compute.internal --username ec2-user --key cfn.pem --filename x.x.x.x-mem.lime --repository --gpg-no-verify
2021-10-15T22:05:30 - margaritashotgun - ERROR - The kernel module for 5.4.149-73.259.amzn2.x86_64 does not exist, searched https://threatresponse-lime-modules.s3.amazonaws.com for availible modules

Is there another OSS tool we can use in the interim?