CyLR
A cross-platform forensic artifact collection tool for NTFS file systems that minimizes host impact.
What is CyLR?
CyLR is a forensic artifact collection tool designed for incident responders and digital forensics investigators. It quickly gathers critical evidence from NTFS file systems across Windows, Linux, and macOS while minimizing impact on the target host. The tool creates compressed, secure archives of forensic artifacts that can be analyzed offline.
Digital forensics investigators, incident response teams, and security professionals who need to collect forensic evidence from live systems during security incidents or investigations.
CyLR offers faster collection through raw NTFS access, cross-platform compatibility with self-contained binaries, and flexible artifact targeting while maintaining minimal host impact—making it ideal for time-sensitive incident response scenarios.
Overview
CyLR - Live Response Collection Tool
Use Cases
Best For
- Collecting forensic artifacts from Windows systems during incident response
- Rapid evidence gathering from live NTFS file systems with minimal disruption
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
