{"repo":"tclahr/uac","free":true,"listed":false,"github":"https://github.com/tclahr/uac","clone":"git clone https://github.com/tclahr/uac.git","description":"UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.","language":"Shell","stars":1434,"topics":["incident-response","forensics","computer-forensics","triage","linux","aix","solaris","macos","openbsd","freebsd"],"license":"Apache-2.0","category":"workflow-automation","readme_excerpt":"Unix-like Artifacts Collector (UAC) About • Documentation • Main Features • Supported Operating Systems • Usage • Contributing • Support • License 🔎 About UAC UAC (Unix-like Artifacts Collector) is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris. Whether you're handling an intrusion, conducting forensic investigations, or performing compliance checks, UAC simplifies and accelerates data collection while minimizing reliance on external support during critical incidents. Key Highlights - 📂 Fully customizable via YAML profiles for tailored data collection. - ⚡ Lightweight, portable, and requires no installation or dependencies. - 🔒 Adheres to the order of volatility to ensure reliable data acquisition. - 🛠 Designed for diverse environments, including IoT devices and NAS systems. 📘 Documentation Full documentation is available at the project documentation page. 🌟 Main Features - Run everywhere with no dependencies (no installation required). - Customizable and extensible collections and artifacts. - Respect the order of volatility during artifact collection. - Collect information about current running processes (including processes without a binary on disk). - Hash running processes and executable files. - Extract files and directories","default_branch":null,"files":null,"tree":[],"storefront":"/r/tclahr","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/tclahr/uac/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}