DFIR ORC
Forensics & Incident ResponseDFIR ORC is a collection of specialized tools dedicated to reliably parse and collect critical artifacts such as the MFT, registry hives or event logs. DFIR ORC collects data, but does not analyze it: it is not meant to triage machines. It provides a forensically relevant snapshot of machines running Microsoft Windows. The code can be found on GitHub.
Recent releases
View all 2 releases →
Review required
v10.3.0
Breaking risk
Auth
Dependencies
OrcCapsule, WolfLauncher multi-instance, ToolEmbed /embed
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
winget
Platforms
windows
