Cold Disk Quick Response
A forensic artifact parsing tool that quickly analyzes disk images and extracted artifacts from Windows, Linux, macOS, and Android devices.
What is Cold Disk Quick Response?
CDQR (Cold Disk Quick Response) is a forensic artifact parsing tool that rapidly analyzes disk images, mounted drives, and extracted artifacts from Windows, Linux, macOS, and Android devices. It uses the Plaso engine with curated parsers to generate structured CSV reports based on triaging best practices, helping investigators quickly identify key evidence during incident response.
Digital forensic analysts, incident responders, and cybersecurity professionals who need to quickly triage disk images or artifact collections during investigations.
CDQR simplifies forensic analysis by automating artifact parsing and report generation, reducing manual effort and providing a consistent starting point for investigations across multiple operating systems.
Overview
The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices
Use Cases
Best For
- Rapid triage of disk images during incident response
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
