Skip to content

Releases: lexfo/orc2tree

v1.0

01 Apr 12:22
bdee3b2
Compare
Choose a tag to compare

First Features

  • Extract and Reconstruct Source Tree: Automatically extracts 7-Zip or Zip archives collected by DFIR-ORC and reconstructs the original directory structure based on GetThis.csv metadata.
  • Based on DFIR-ORC Execution Outline: Compatible with DFIR-ORC collections from version 10.0.14 and later.
  • Centralized File Metadata: Collects and aggregates extracted file metadata into a dedicated CSV file for easy analysis.
  • Dockerized Deployment: Includes a prebuilt Docker image with orc2tree and orc-decrypt installed for streamlined usage.
  • Optional Integrity Verification: Allows users to validate the integrity of extracted files on demand.

Installation & Usage: See the updated README for setup instructions.
Feedback & Contributions: Feel free to open issues or submit PRs!