DFIR ORC
DFIR ORC is a collection of specialized tools dedicated to reliably parse and collect critical artifacts such as the MFT, registry hives or event logs. DFIR ORC collects data, but does not analyze it: it is not meant to triage machines. It provides a forensically relevant…
- from
- Incident Response
- added
- 2026-10-10
- likes
- 0
similar
-
Digital Forensic (DFIR) Specialist Roadmap github.com
-
-
FastIR Collector github.com
Tool that collects different artifacts on live Windows systems and records the results in csv files. With the analyses of these artifacts, an early compromise can be detected.
-
FastIR Collector Linux github.com
FastIR for Linux collects different artifacts on live Linux and records the results in CSV files.
-
DFIRTrack github.com
Incident Response tracking application handling one or more incidents via cases and tasks with a lot of affected systems and artifacts.
-
Incident Response › IR Tools Collection > Windows Evidence Collection: “DFIR ORC is a collection of specialized tools dedicated to reliably parse and collect critical artifacts such as the MFT, registry hives or event logs. DFIR ORC collects data, but does not analyze it: it is not meant to triage machines. It provides a forensically relevant…”