UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of U…

The official repo for a project involving a crowdsourced DFIR book. The main purpose of this book is to give anyone interested an opportunity to write a chapter of a book to get their name out ther…

AVML - Acquire Volatile Memory for Linux

Linux Evidence Acquisition Framework

Library and tools to access the VMware Virtual Disk (VMDK) format

Repository of yara rules