Collect Unix-like incident-response artifacts into one portable evidence bundle with UAC

Capture volatile and persistent Unix-like system artifacts quickly before evidence disappears or responders start changing the host.

Prerequisites

Shell access to the target Unix-like host, UAC runtime, sufficient privileges for artifact collection, storage location for the output bundle

Installation

Requirements and caveats from upstream:

• ⚡ Lightweight, portable, and requires no installation or dependencies.

Basic usage or getting-started notes:

• <a href="#-usage">Usage</a>

• Run everywhere with no dependencies (no installation required).

• 🚀 Usage

• Source: https://github.com/tclahr/uac

• Extracted from upstream docs: https://raw.githubusercontent.com/tclahr/uac/HEAD/README.md

Documentation

• https://github.com/tclahr/uac

Source

• Agent Skill Exchange