HomeThe Stash

UAC — Unix-like Artifacts Collector

ToolSeptember 11, 2026

UAC is a forensic collection framework that pulls artifacts from Unix-like systems in a structured, repeatable way. For incident response teams, this matters because manual artifact gathering is slow, error-prone, and leaves gaps—especially when you're working across heterogeneous environments or under time pressure. The tool's extensibility means you can adapt collection templates to your environment rather than accepting someone else's defaults. In practice, this shifts your response workflow from "what did we remember to check" to "what does our standard collection actually capture," which is the difference between finding evidence and missing it.

Read the original on github.com