2 min read
|
Saved February 14, 2026
|
Copied!
Do you care about this?
UAC is an incident response tool for collecting artifacts from various Unix-like systems. It automates data collection for forensic investigations, compliance checks, and more, using customizable YAML profiles without requiring installation. The tool supports diverse environments, including IoT devices and NAS systems.
If you do, here's more
UAC, or Unix-like Artifacts Collector, is a tool designed for incident response, particularly useful for forensic investigators and IT professionals. It streamlines the process of collecting critical data from a variety of Unix-like systems, including Linux, macOS, and Solaris, without requiring installation. This makes it suitable for environments like IoT devices and NAS systems. UAC operates based on YAML profiles, allowing users to customize data collection according to specific needs, which enhances its versatility.
Key features include adherence to the order of volatility, which is essential for ensuring that the most crucial data is collected first. UAC can gather information about running processes, hash executable files, and even extract system logs. Users can run it directly from the terminal, making it user-friendly and efficient. The tool also supports output to various cloud platforms, which can be beneficial for data management and storage.
For those looking to contribute, UAC encourages the open-source community to share artifacts, profiles, and enhancements. There are channels available for assistance, including Discord for live discussions and GitHub for reporting bugs or submitting code. The project is licensed under the Apache License Version 2.0, ensuring that it remains open for public use and improvement. Overall, UAC offers a robust solution for incident response and data collection in diverse computing environments.
Questions about this article
No questions yet.