The French National Cybersecurity Agency presents DFIR ORC : an open-source forensics tool dedicated to artefact collection

Created in 2011 to address operational needs of incident responders at ANSSI, DFIR ORC is a modular framework to collect forensic artefacts on machines running a Microsoft Windows operating system.