{"id":13773516,"url":"https://github.com/fox-it/acquire","last_synced_at":"2025-05-11T05:34:53.282Z","repository":{"id":60772469,"uuid":"515986949","full_name":"fox-it/acquire","owner":"fox-it","description":"acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.","archived":false,"fork":false,"pushed_at":"2025-05-06T14:14:51.000Z","size":356,"stargazers_count":102,"open_issues_count":44,"forks_count":32,"subscribers_count":13,"default_branch":"main","last_synced_at":"2025-05-06T15:05:50.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"agpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/fox-it.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2022-07-20T13:09:48.000Z","updated_at":"2025-05-06T14:14:53.000Z","dependencies_parsed_at":"2023-12-20T14:26:28.465Z","dependency_job_id":"57d3c532-240b-4da8-a585-1f5f168ec709","html_url":"https://github.com/fox-it/acquire","commit_stats":{"total_commits":42,"total_committers":9,"mean_commits":4.666666666666667,"dds":0.7142857142857143,"last_synced_commit":"7760eb217e74e72520f1982a3cf3b30578931692"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fox-it%2Facquire","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fox-it%2Facquire/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fox-it%2Facquire/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fox-it%2Facquire/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/fox-it","download_url":"https://codeload.github.com/fox-it/acquire/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":253523689,"owners_count":21921815,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-03T17:01:16.561Z","updated_at":"2025-05-11T05:34:48.268Z","avatar_url":"https://github.com/fox-it.png","language":"Python","readme":"# Acquire\n\n`acquire` is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.\nThis makes `acquire` an excellent tool to, among others, speedup the process of digital forensic triage.\nIt uses `dissect` to gather that information from the raw disk, if possible.\n\n`acquire` gathers artifacts based on modules. These modules are paths or globs on a filesystem which acquire attempts to gather.\nMultiple modules can be executed at once, which have been collected together inside a profile.\nThese profiles (used with `--profile`) are  `full`, `default`, `minimal` and `none`.\nDepending on what operating system gets detected, different artifacts are collected.\n\nThe most basic usage of `acquire` is as follows:\n\n```bash\nuser@dissect~$ sudo acquire\n```\n\nThe tool requires administrative access to read raw disk data instead of using the operating system for file access.\nHowever, there are some options available to use the operating system as a fallback option. (e.g `--fallback` or `--force-fallback`)\n\nFor more information, please see [the documentation](https://docs.dissect.tools/en/latest/projects/acquire/index.html).\n\n## Requirements\n\nThis project is part of the Dissect framework and requires Python.\n\nInformation on the supported Python versions can be found in the Getting Started section of [the documentation](https://docs.dissect.tools/en/latest/index.html#getting-started).\n\n## Installation\n\n`acquire` is available on [PyPI](https://pypi.org/project/acquire/).\n\n```bash\npip install acquire\n```\n\n## Build and test instructions\n\nThis project uses `tox` to build source and wheel distributions. Run the following command from the root folder to build\nthese:\n\n```bash\ntox -e build\n```\n\nThe build artifacts can be found in the `dist/` directory.\n\n`tox` is also used to run linting and unit tests in a self-contained environment. To run both linting and unit tests\nusing the default installed Python version, run:\n\n```bash\ntox\n```\n\nFor a more elaborate explanation on how to build and test the project, please see [the\ndocumentation](https://docs.dissect.tools/en/latest/contributing/tooling.html).\n\n## Contributing\n\nThe Dissect project encourages any contribution to the codebase. To make your contribution fit into the project, please\nrefer to [the development guide](https://docs.dissect.tools/en/latest/contributing/developing.html).\n\n## Copyright and license\n\nDissect is released as open source by Fox-IT (\u003chttps://www.fox-it.com\u003e) part of NCC Group Plc\n(\u003chttps://www.nccgroup.com\u003e).\n\nDeveloped by the Dissect Team (\u003cdissect@fox-it.com\u003e) and made available at \u003chttps://github.com/fox-it/acquire\u003e.\n\nLicense terms: AGPL3 (\u003chttps://www.gnu.org/licenses/agpl-3.0.html\u003e). For more information, see the LICENSE file.\n","funding_links":[],"categories":["IR Tools Collection","Tools"],"sub_categories":["Evidence Collection","Acquisition"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffox-it%2Facquire","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ffox-it%2Facquire","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffox-it%2Facquire/lists"}