# Collect Unix-like incident-response artifacts into one portable evidence bundle with UAC

> Capture volatile and persistent Unix-like system artifacts quickly before evidence disappears or responders start changing the host.

- Skill: `agentskillexchange/collect-unix-like-incident-response-artifacts-into-one-porta` (Agent Skill)
- Install (CLI): `npx skillmds@latest add agentskillexchange/collect-unix-like-incident-response-artifacts-into-one-porta`
- Raw SKILL.md: https://api.skillmd.com/api/skills/agentskillexchange/collect-unix-like-incident-response-artifacts-into-one-porta/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: agentskillexchange (https://skillmd.com/u/agentskillexchange)
- Updated: 2026-09-08
- Page: https://skillmd.com/skills/agentskillexchange/collect-unix-like-incident-response-artifacts-into-one-porta

---


# Collect Unix-like incident-response artifacts into one portable evidence bundle with UAC

Capture volatile and persistent Unix-like system artifacts quickly before evidence disappears or responders start changing the host.

## Prerequisites

Shell access to the target Unix-like host, UAC runtime, sufficient privileges for artifact collection, storage location for the output bundle

## Installation

Requirements and caveats from upstream:
- ⚡ Lightweight, portable, and requires no installation or dependencies.

Basic usage or getting-started notes:
- <a href="#-usage">Usage</a>
- Run everywhere with no dependencies (no installation required).
- ## 🚀 Usage

- Source: https://github.com/tclahr/uac
- Extracted from upstream docs: https://raw.githubusercontent.com/tclahr/uac/HEAD/README.md

## Documentation

- https://github.com/tclahr/uac

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/collect-unix-like-incident-response-artifacts-into-one-portable-evidence-bundle-with-uac/)