This documentation supports the artifactcollector and elementary command line tools, forensicstores and the related libraries.

While the artifactcollector can be run without special IT expertise the elementary tooling and this documentation is aimed at forensicators, incident responders and analysts.

The code and API documentations are linked in the corresponding GitHub repositories. For questions you can use GitHub or the Open Source DFIR Slack.

This documentation is splitted into an usage sections for users of the provided tools and a development section for people that want to customize or extent the tools.