Acquire
A tool to quickly gather forensic artifacts from disk images or live systems into lightweight containers for digital forensic triage.
What is Acquire?
Acquire is a forensic tool that rapidly collects digital forensic artifacts from disk images or live systems and packages them into lightweight containers. It solves the problem of slow forensic triage by automating artifact extraction and minimizing data overhead. The tool integrates with the Dissect framework to read raw disk data directly for efficient collection.
Digital forensic analysts, incident responders, and cybersecurity professionals who need to perform rapid triage on disk images or live systems during investigations.
Developers choose Acquire for its speed in forensic triage, modular artifact collection, and seamless integration with the Dissect framework, which allows raw disk access without relying on the operating system.
Overview
acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.
Use Cases
Best For
- Rapid forensic triage of disk images during incident response
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
