artifactcollector
A customizable single-binary agent for collecting forensic artifacts from Windows, macOS, and Linux systems.
What is artifactcollector?
artifactcollector is a forensic tool that collects specific artifacts from Windows, macOS, and Linux systems for investigative purposes. It extracts targeted data like files, registry keys, and system outputs without requiring full disk images, streamlining forensic analysis. The tool is distributed as a single binary that can be deployed directly on systems under investigation.
Digital forensic investigators, incident responders, and security professionals who need to collect targeted forensic evidence from diverse operating systems during investigations.
Developers choose artifactcollector for its portability as a single binary, cross-platform compatibility including legacy Windows versions, and extensible artifact definitions based on the Forensic Artifacts framework, enabling customizable and efficient evidence collection.
Overview
🧭 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system
Use Cases
Best For
- Collecting targeted forensic artifacts without full disk imaging
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
