Python tool development project to help detect and synthesize the behavior of malicious code, especially fileless malware during the CA process.
-
Updated
Apr 16, 2024 - Python
#
artifact-collection
Here are 8 public repositories matching this topic...
Windows Forensic Triage Tool is a Python-based framework that automates forensic artifact collection, evidence analysis, digital signature verification, and HTML report generation to support incident response investigations.
-
Updated
Apr 12, 2026 - Python
A comprehensive PowerShell tool for security analysts and incident responders that systematically collects Windows event logs, system information, network data, and forensic artifacts into organized ZIP archives for security analysis and investigation.
windows security log-analysis powershell incident-response forensics cybersecurity threat-hunting digital-forensics security-tools event-logs artifact-collection
-
Updated
Apr 4, 2026 - PowerShell
macOS DFIR Artifact Collector — single-file, zero-dependency, modular collection script with selective module execution and supply-chain IOC sweeps.
macos bash incident-response forensics dfir threat-hunting triage blue-team supply-chain-security artifact-collection macos-forensics litellm artifact-collector
-
Updated
May 14, 2026 - Shell
ForensicTools automatise l’acquisition forensique multi-plateforme (Windows, Linux, macOS) : collecte d’artefacts volatils et persistants, capture mémoire, copie bit-à-bit des disques, chaîne de custody, gestion des dossiers d’enquête et orchestration d’outils d’analyse (Volatility3, Plaso, YARA, Sleuth Kit).
forensics dfir digital-forensics forensic-analysis memory-forensics security-tools sleuthkit forensics-investigations chain-of-custody forensics-tools cybersecurity-tools artifact-collection dfir-tools live-forensics incident-response-forensics
-
Updated
Jul 8, 2026 - Python
Powerful investigation toolkit for deeper forensic analysis
powershell incident-response forensics dfir cybersecurity digital-forensics triage blueteam memory-forensics security-tools live-response windows-forensics memory-acquisition artifact-collection ir-toolkit incident-response-toolkit
-
Updated
Jan 21, 2026 - PowerShell
Single-file PowerShell Incident Response and DFIR triage collector for Windows. Gathers high-value forensic artifacts into one timestamped, hashed, packaged output. Defensive and authorized use only.
powershell incident-response dfir threat-hunting digital-forensics triage evtx live-response windows-forensics artifact-collection
-
Updated
Jul 6, 2026 - PowerShell
A modular Windows DFIR artifact collection tool written in Go for incident response and response triage. Supports memory, NTFS, registry, event logs, and more.
-
Updated
May 4, 2026 - Go
Improve this page
Add a description, image, and links to the artifact-collection topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the artifact-collection topic, visit your repo's landing page and select "manage topics."