issues
search
fox-it
/
acquire
acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.
GNU Affero General Public License v3.0
91
stars
26
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Add a timeout to the os.read function in VolatileStream
#205
Miauwkeru
closed
6 days ago
1
Bootbanks module fails with AttributeError
#204
twiggler
opened
2 weeks ago
0
Fix regression in OSError handling logic
#203
pyrco
closed
4 weeks ago
1
Acquire fails when collecting from a "default"-type OS
#202
pyrco
closed
4 weeks ago
0
Make acquire more robust against missing collection profiles
#201
pyrco
closed
4 weeks ago
1
Add collection of individual user search indexes on Windows
#200
reece394
closed
4 weeks ago
5
Add collection of Docker logs
#199
Paradoxis
closed
4 weeks ago
1
Acquire device list
#198
cecinestpasunepipe
closed
1 month ago
1
Rewrite netstat and arp/net-neighbor collection method
#197
lhotlan64
opened
1 month ago
3
Make encryption work with zip files
#196
twiggler
closed
1 month ago
3
Can not use --output-type zip and --encrypt together
#195
DissectBot
closed
1 month ago
0
Draft: Test pipeline
#194
Miauwkeru
closed
2 months ago
1
Add BitLocker and LUKS support to Acquire
#193
larsbehrens1
closed
2 months ago
2
Draft: Fix cffi build issue for windows pypy pipelines
#192
Miauwkeru
closed
2 months ago
2
Fix inconsistent error messages involving `output-file`
#191
twiggler
closed
2 months ago
2
Add MacOS and Linux log paths to TeamViewer module
#190
Poeloe
closed
3 months ago
1
Collection Feature/proxmox implementation PR#184
#189
EinatFox
opened
3 months ago
0
Added collection of Opera (Stable/GX) browser profile storage location for browser history PR#181
#188
EinatFox
opened
3 months ago
0
Added Windows Update Agent's DataStore for collection
#187
michoebey
closed
4 months ago
1
Add exit codes and summary to acquire-decrypt
#186
Poeloe
closed
4 months ago
1
Make acquire compression configurable
#185
Horofic
closed
4 months ago
1
Feature/proxmox implementation
#184
otnxSl
opened
4 months ago
1
Make compression algorithms for Acquire output configurable
#183
Horofic
closed
4 months ago
0
Fix compression in zip outputs when compress option is supplied
#182
ruzzle
closed
4 months ago
7
Added collection of Opera (Stable/GX) browser profile storage location for browser history
#181
RickGeex
opened
4 months ago
0
Collect `$Secure:$SII` NTFS file
#180
Schamper
opened
5 months ago
0
Add optional boolean value to all store_true instances
#179
Miauwkeru
closed
4 months ago
1
Add Linux and macOS paths for TeamViewer
#178
Schamper
closed
3 months ago
0
Improve logging successful and failed acquire runs
#177
pyrco
closed
5 months ago
1
Add an EDR (Endpoint Detection and Response) log collection module
#176
pyrco
closed
5 months ago
1
Fix shard issue
#175
cecinestpasunepipe
closed
5 months ago
1
Add temporary suffix while Acquire is still running
#174
joost-j
opened
5 months ago
0
Bump dissect.ctruct dependency to version 4
#173
pyrco
closed
5 months ago
1
Bump the version of virtualenv in tox.ini to pull in the correct version of pip
#172
pyrco
closed
5 months ago
1
Inconsistent output paths when acquiring Windows container from Linux
#171
JazzCore
opened
6 months ago
1
Compatibility with cstruct v4
#170
pyrco
closed
6 months ago
1
Inconsistent flag name in error message
#169
DissectBot
closed
2 months ago
0
ESXi memory manager should always be used when running on an ESXi host system
#168
DissectBot
opened
7 months ago
0
Add a pull request template
#167
Miauwkeru
closed
7 months ago
1
Collect CarbonBlack logs
#166
yunzheng
closed
5 months ago
0
Add AnyDesk paths
#165
Poeloe
closed
7 months ago
1
Add collection of notepad tab directories
#164
joost-j
closed
4 months ago
1
Update github action versions
#163
Miauwkeru
closed
8 months ago
2
Allow multiple targets with acquire
#162
cecinestpasunepipe
closed
7 months ago
1
New collection and de-duplication logic
#161
pyrco
closed
7 months ago
2
Add `output-file` command line argument
#160
Poeloe
closed
8 months ago
1
OSX module InstallHistory.plist file treated as a directory
#159
Politie-SOC
opened
8 months ago
1
Check for existing decompressed acquire when decrypting
#158
Poeloe
closed
8 months ago
1
Bump minimal tox version
#157
Schamper
closed
8 months ago
0
Add option to acquire to collect UEFI
#156
DissectBot
opened
8 months ago
1
Next