acquire

acquire 3.21

Tool to quickly gather forensic artifacts from disk images or a live system

https://github.com/fox-it/acquire
GNU Affero General Public License v3.0 only
programs: acquire-decrypt, acquire
Platforms (32)
aarch64-linuxmips64el-linuxx86_64-windowsaarch64-windowsarmv6l-linuxi686-windowsm68k-linuxloongarch64-linux
View source on NixOS/nixpkgs →

Install

Copy into your configuration

NixOS (configuration.nix)
environment.systemPackages = with pkgs; [
  acquire
];
Ad-hoc shell
nix-shell -p acquire
Flake (nix run)
nix run nixpkgs#acquire