/inquisitor

Forensics artifacts collection

Primary LanguagePowerShell

inquisitor

Quick Demo

Execution instructions:

  1. Download last release from https://github.com/nrrpinto/inquisitor/releases
  2. Unzip it.
  3. Execute file inquisitor.bat in administrator mode.

Collect evidences:

  1. Select a source drive.
  2. Select a destiny drive.
  3. Select artifacts you want to collect.
  4. Click Execute button.

More information about Inquisitor can be found in: https://f4d0n1.blogspot.com/2019/09/inquisitor-forensics-artifacts.html

DISCLAIMER: Use this tool at your own risk. The creator of Inquisitor is not responsible for any damage related to any kind of use of this tool.