AChoir
Artifact Collector
A scripting framework to simplify the process of gathering forensic artifacts from Windows devices.
Windows Live Artifacts Acquisition Script
183 stars
13 watching
29 forks
Language: C++
last commit: over 2 years ago
Linked from 2 awesome lists
rshipp/awesome-malware-analysis
meirwah/awesome-incident-responseRelated projects:
| Repository | Description | Stars |
|---|---|---|
| omenscan/achoirx | A Go-based forensic collection and analysis tool designed for cross-platform use. | 35 |
 forensicanalysis/artifactcollector | A tool to extract forensic artifacts from various operating systems | 270 |
 ownsecurity/fastir_artifacts | A tool for collecting forensic artifacts from live hosts across multiple operating systems. | 160 |
 abdulrhmanalfaifi/fennec | Tool for collecting artifacts from *nix systems during incident response | 192 |
 forensicartifacts/artifacts | A repository of machine-readable digital forensic artifacts in YAML format, validated by Python code. | 1,062 |
 fox-it/acquire | A tool to quickly gather forensic artifacts from disk images or live systems into a lightweight container. | 91 |
 muteb/hoarder | A tool to collect and parse Windows artifacts from disk images or live machines. | 193 |
 silv3rhorn/artifactextractor | Extracts Windows artifacts from images and virtual machines | 65 |
 pstirparo/mac4n6 | A centralized collection of forensics artifacts locations for Mac OS X and iOS. | 326 |
 orlikoski/cylr | A tool that collects and preserves forensic artifacts from NTFS file systems without impacting the host system. | 645 |
 sekoialab/fastir_collector | A tool for collecting and analyzing Windows system artefacts on live systems | 506 |
 ydkhatri/macforensics | A collection of scripts to analyze and process macOS forensic artifacts. | 179 |
 op7ic/unix_collector | A tool for collecting forensic data from various UNIX-like systems | 32 |
 gems-uff/noworkflow | Automates the tracking of how data is produced and transformed in scientific experiments. | 120 |
 tclahr/uac | Automates incident response data collection from various operating systems | 797 |