Collect Unix-like incident-response artifacts into one portable evidence bundle with UAC

Capture volatile and persistent Unix-like system artifacts quickly before evidence disappears or responders start changing the host.

agentskillexchange Updated 28 repo stars

File contents

Collect Unix-like incident-response artifacts into one portable evidence bundle with UAC

Capture volatile and persistent Unix-like system artifacts quickly before evidence disappears or responders start changing the host.

Prerequisites

Shell access to the target Unix-like host, UAC runtime, sufficient privileges for artifact collection, storage location for the output bundle

Installation

Requirements and caveats from upstream:

  • ⚡ Lightweight, portable, and requires no installation or dependencies.

Basic usage or getting-started notes:

Documentation

Source

agentskillexchange/skills/tree/main/skills/collect-unix-like-incident-response-artifacts-into-one-portable-evidence-bundle-with-uac commit 98d27ff6f1

Frequently asked questions

npx skillmds@latest add agentskillexchange/collect-unix-like-incident-response-artifacts-into-one-porta