Find forensic artifacts in mount points or the live system. Part of the Forensic Artifacts Collecting Toolkit.
-
Updated
Aug 19, 2025 - Go
Find forensic artifacts in mount points or the live system. Part of the Forensic Artifacts Collecting Toolkit.
A shell pipeline for extracting forensic artifacts from disk images in ECS format.
Add a description, image, and links to the ffind topic page so that developers can more easily learn about it.
To associate your repository with the ffind topic, visit your repo's landing page and select "manage topics."