Forensic Artefact Collection Tool

Overview

FACT is a tool to collect, process and visualise forensic data from clusters of machines running in the cloud or on-premise.

Deployment

For a basic single-node deployment, we recommend using Docker and Docker Compose. First, read docker-compose.yaml for configuration and requirements. Then, start the stack using:

docker-compose up -d

See the installation guide for more details and other deployment methods.

Using FACT

Check out the user guide.

Developing

See the developer documentation for details on setting up a development environment, linting and testing.

Screenshots