← Back to catalog
TAPIR
by Tool host OS / runtime environment
TAPIR by Tool host OS / runtime environment. A digital forensics tool for forensic tool suite (windows investigations).
Platforms
Windows
Artifact types
Event Logs (EVTX)File SystemPrefetch FilesWindows Registry
License
Open SourceSkill level
AdvancedVersion
0.1Website
https://tap-ir.github.ioUse cases
incident response
Techniques
artifact parsingpost mortem