🧭 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system
Velociraptor is a digital forensics and incident response platform, endpoint detection and response system, and visibility tool. It provides a query engine and remote forensic collector used to hunt for indicators of compromise and perform triage across a fleet of hosts. The system is distinguished by its specialized query language for interrogating host state and parsing binary files. It features a notebook environment that combines markdown documentation with executable query cells to standardize investigative workflows and enable collaborative reporting. The platform covers a wide range o
Forensic tool for acquisition, triage and analysis of remote block devices via iSCSI protocol.
A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.
Les fonctionnalités principales de fox-it/acquire sont : Evidence Collection, Acquisition and Imaging, Forensics and Evidence Collection.
Les alternatives open-source à fox-it/acquire incluent : forensicanalysis/artifactcollector — 🧭 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system. velocidex/velociraptor — Velociraptor is a digital forensics and incident response platform, endpoint detection and response system, and… orlikoski/cylr — CyLR - Live Response Collection Tool. forensicartifacts/artifacts — Digital Forensics artifact repository. alpine-sec/spectr3 — Forensic tool for acquisition, triage and analysis of remote block devices via iSCSI protocol. diogo-fernan/ir-rescue — A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.