Loading...
The artifactcollector project provides a software that collects forensic artifacts on systems. These artifacts can be used in forensic investigations to understand attacker behavior on compromised computers. Features: * Runs on Windows, Linux, and macOS * Can extract files, directories, registry entries, command and WMI output * Uses configurable and extensible Forensics Artifacts * Creates a forensicstore as structured output * It's open source and free for everyone (including commercial use) Installation: * Download from https://github.com/forensicanalysis/artifactcollector/releases or clone the repository and install using go install . Get artifacts & process forensicstores: * Extract raw artifacts or process collected data using elementary.
Common questions about artifactcollector including features, pricing, alternatives, and user reviews.
artifactcollector is A software that collects forensic artifacts on systems for forensic investigations.. It is a Security Operations solution designed to help security teams with Evidence Collection, Memory Forensics.
Get strategic cybersecurity insights in your inbox
A library and set of tools for accessing and analyzing storage media devices and partitions for forensic analysis and investigation.
A PowerShell-based incident response and live forensic data acquisition tool for Windows hosts.
A digital forensics tool that provides read-only access to file-system objects from various storage media types and file formats.
Request Tracker for Incident Response (RTIR) is a tool for incident response teams to manage incident reports, correlate data, and facilitate communication.