DFIRHub

ServerTriage

A compound target for gathering artifacts common to servers.

  • Compound
  • 35 paths from 12 artifacts
  • Per-user data
  • Version 1.1
  • Eric Capuano

Paths on disk

35 paths from 12 targets

Paths use Windows environment variable syntax

Includes 7 targets

Each one is collected with this target

Notes

v1.1 - Added MongoDB Logs target

A Target to run on generic servers when their role is unknown. Includes common server applications.