Digital Forensics Artifact Repository

A free, community-sourced, machine-readable knowledge base of forensic artifacts that the world can use both as an information source and within other tools.

If you'd like to use the artifacts in your own tools, all you need to be able to do is read YAML. That's it. No other dependencies. The python code in this project is just used to validate all the artifacts to make sure they follow the spec.

The artifact repository was forked from the GRR project artifact collection into a stand-alone repository that is not tool-specific. The GRR developers will migrate to using this repository and make contributions here. In addition the ForensicArtifact team will begin backfilling artifacts in the new format from the website.

For some background on the artifacts system and how we expect it to be used see this blackhat presentation and youtube video from the GRR team.

Source Files
Filename Size Changed Actions
artifacts-20150409.tar.gz 0000024937 24.4 KB about 5 years
artifacts.changes 0000000159 159 Bytes about 5 years
artifacts.spec 0000003004 2.93 KB about 5 years
Comments for artifacts 0