The French National Cybersecurity Agency presents DFIR ORC : an open-source forensics tool dedicated to artefact collection


Created in 2011 to address operational needs of incident responders at ANSSI, DFIR ORC is a modular framework to collect forensic artefacts on machines running a Microsoft Windows operating system.

  • pdf

    Press release - DFIR ORC

    304.38 Ko