acquire
Artifact collector
A tool for gathering forensic artifacts from disk images or live systems into a lightweight container.
acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.
92 stars
15 watching
26 forks
Language: Python
last commit: about 2 months ago
Linked from 2 awesome lists
Related projects:
Repository | Description | Stars |
---|---|---|
ownsecurity/fastir_artifacts | A tool for collecting forensic artifacts from live hosts across multiple operating systems. | 160 |
forensicanalysis/artifactcollector | A tool to extract forensic artifacts from various operating systems | 271 |
forensicartifacts/artifacts | A repository of machine-readable digital forensic artifacts in YAML format, validated by Python code. | 1,071 |
fox-it/dissect.target | Provides a programming API and command line tools to access various data sources inside disk images or file collections. | 48 |
pstirparo/mac4n6 | A centralized collection of forensics artifacts locations for Mac OS X and iOS. | 326 |
omenscan/achoir | A scripting framework to simplify the process of gathering forensic artifacts from Windows devices. | 184 |
fox-it/dissect.archive | Parses various archive and backup formats using Python | 0 |
fox-it/dissect | A digital forensics framework that provides tools and parsers to analyze forensic artefacts from various disk and file formats. | 939 |
muteb/hoarder | A tool to collect and parse Windows artifacts from disk images or live machines. | 194 |
gems-uff/noworkflow | Automates the tracking of how data is produced and transformed in scientific experiments. | 122 |
sekoialab/fastir_collector | A tool for collecting and analyzing Windows system artefacts on live systems | 507 |
op7ic/unix_collector | A script designed to automatically collect various system artifacts and data from Unix-like systems without the need for manual intervention or external dependencies. | 33 |
fox-it/dissect.xfs | A Dissect module implementing a parser for the XFS file system, commonly used by RedHat Linux distributions. | 2 |
abdulrhmanalfaifi/fennec | Tool for collecting artifacts from *nix systems during incident response | 195 |
hurricanelabs/machinae | A tool for collecting security-related data from public sites and feeds. | 505 |