Releases: lexfo/orc2tree
Releases · lexfo/orc2tree
v1.0
First Features
- Extract and Reconstruct Source Tree: Automatically extracts 7-Zip or Zip archives collected by DFIR-ORC and reconstructs the original directory structure based on
GetThis.csv
metadata. - Based on DFIR-ORC Execution Outline: Compatible with DFIR-ORC collections from version 10.0.14 and later.
- Centralized File Metadata: Collects and aggregates extracted file metadata into a dedicated CSV file for easy analysis.
- Dockerized Deployment: Includes a prebuilt Docker image with orc2tree and orc-decrypt installed for streamlined usage.
- Optional Integrity Verification: Allows users to validate the integrity of extracted files on demand.
Installation & Usage: See the updated README for setup instructions.
Feedback & Contributions: Feel free to open issues or submit PRs!