Forensics artefact collection tool for systems running Microsoft Windows

orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them

Configurations for DFIR ORC

Orchestration Software for Incident Response

Documentation for DFIR ORC, artefact collection tool dedicated to Microsoft Windows

Malware detection tool for Windows PE files based on DFIR ORC data

Extracts the files collected by the DFIR-ORC tool and reorganizes them according to their original location on the disk.

Auto extract french DFIR ORC

Repository of scripts to assist in the deployment of DFIR-ORC

Get Secure PowerShell Investigation & Control for Endpoint is a PowerShell script used to deploy the live-forensic tool DFIR-ORC

This is the source for the dfir-orc documentation.

Tools to decrypt DFIR-Orc archives

A tool to quickly qualify FastFind results from DFIR-ORC

Convert Kape Files to DFIR-ORC configurations

automated - DFIR - orchestrator in AWS

Complied Binary of DFIR-ORC see : https://github.com/DFIR-ORC/dfir-orc

DFIR ORC PARSER PROJECT

DFIR-Orc GetThis tool configuration generator.

Convert Kap .Tkape to DFIR-ORC Configuration

Extract Windows password hashes from DFIR-Orc

Restore file system structure from DFIR ORC triage

No description available

No description available

No description available

No description available

A conceptual, non‑operational outline of governance primitives for AI‑orchestrated DFIR systems. Defines the discipline. Does not contain implementations, algorithms, or proprietary architectures.

No description available