Live Response Collection

brimorlabs.comsite

Automated tool that collects volatile data from Windows, OSX, and *nix based operating systems.

from

Incident Response

added

2026-10-10

likes

0

similar

1. ▲
   OSX Collector github.com

   tool category #incident-response link ↗

   OSX Auditor offshoot for live response.

   
2. ▲
   Invoke-LiveResponse github.com

   tool category #incident-response link ↗

   Invoke-LiveResponse is a live response tool for targeted collection.

   
3. ▲
   Crowd Response crowdstrike.com

   site category #incident-response link ↗

   Lightweight Windows console application designed to aid in the gathering of system information for incident response and security engagements. It features numerous modules and output formats.

4. ▲
   ir-rescue github.com

   tool category #sbilly-awesome-security link ↗

   ir-rescue is a Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

   
5. ▲
   Rekall rekall-forensic.com

   site category #malware-analysis link ↗

   Open source tool (and library) for the extraction of digital artifacts from volatile memory (RAM) samples.

6. ▲
   IRIS github.com

   tool category #incident-response link ↗

   IRIS is a web collaborative platform for incident response analysts allowing to share investigations at a technical level.

   

Incident Response › IR Tools Collection > Evidence Collection: “Automated tool that collects volatile data from Windows, OSX, and *nix based operating systems.”