# Digital Forensics Artifact Collection Tools

> AI-ranked search results for `collect and triage forensic artifacts from a compromised host` on awesome-repositories.com — ordered by an LLM for relevance, best match first. 118 total matches; showing the top 3.

Explore on the web: https://awesome-repositories.com/q/collect-and-triage-forensic-artifacts-from-a-compromised-host

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [this search on awesome-repositories.com](https://awesome-repositories.com/q/collect-and-triage-forensic-artifacts-from-a-compromised-host).**

## Results

- [tclahr/uac](https://awesome-repositories.com/repository/tclahr-uac.md) (1,241 ⭐)
- [google/grr](https://awesome-repositories.com/repository/google-grr.md) (5,074 ⭐) — GRR is a distributed incident response platform and asynchronous forensic task orchestrator. It functions as a remote forensics framework designed to collect and analyze volatile data, system memory, and digital artifacts from remote hosts during security incident response.

The system operates as a remote endpoint triage system, utilizing a coordinated architecture to manage a fleet of agents. It enables the execution of investigative tasks across multiple systems, allowing for the search of files and registries across a large fleet of machines to identify compromised hosts.

The platform pro
- [velocidex/velociraptor](https://awesome-repositories.com/repository/velocidex-velociraptor.md) (3,769 ⭐) — Velociraptor is a digital forensics and incident response platform, endpoint detection and response system, and visibility tool. It provides a query engine and remote forensic collector used to hunt for indicators of compromise and perform triage across a fleet of hosts.

The system is distinguished by its specialized query language for interrogating host state and parsing binary files. It features a notebook environment that combines markdown documentation with executable query cells to standardize investigative workflows and enable collaborative reporting.

The platform covers a wide range o