The artifactcollector project provides a software that collects forensic artifacts on systems. These artifacts can be used in forensic investigations to understand attacker behavior on compromised computers. Features: * Runs on Windows, Linux, and macOS * Can extract files, directories, registry entries, command and WMI output * Uses configurable and extensible Forensics Artifacts * Creates a forensicstore as structured output * It's open source and free for everyone (including commercial use) Installation: * Download from https://github.com/forensicanalysis/artifactcollector/releases or clone the repository and install using go install . Get artifacts & process forensicstores: * Extract raw artifacts or process collected data using elementary.
Common questions about artifactcollector including features, pricing, alternatives, and user reviews.
artifactcollector is A software that collects forensic artifacts on systems for forensic investigations. It is a Security Operations solution designed to help security teams with Evidence Collection, Memory Forensics.
artifactcollector is a free Security Operations tool. This makes it accessible for organizations of all sizes, from startups to enterprises. Visit https://github.com/forensicanalysis/artifactcollector/ for download and installation instructions.
Popular alternatives to artifactcollector include:
Compare all artifactcollector alternatives at https://cybersectools.com/alternatives/artifactcollector
artifactcollector is for security teams and organizations that need Evidence Collection, Memory Forensics. It's particularly suitable for small to medium-sized teams looking for cost-effective solutions. Other Security Operations tools can be found at https://cybersectools.com/categories/security-operations
Head-to-head feature, pricing, and rating breakdowns.
A library and set of tools for accessing and analyzing storage media devices and partitions for forensic analysis and investigation.
A PowerShell-based incident response and live forensic data acquisition tool for Windows hosts.