CDQR - Cold Disk Quick Response
#Incident Management#Digital Forensics
Recover event log entries from an image by heuristically looking for record structures.
The CDQR Tool Utilizes Plaso for Forensic Analysis
The CDQR tool utilizes Plaso to analyze forensic artifacts and/or disk images using specific parsers. This process generates custom reports that are easy to analyze, grouping similar items together. It adheres to the Live Response Model for investigations.
It generates up to 18 reports for enhanced forensic analysis
It generates up to 18 reports based on triaging best practices and parsing options. This makes it a valuable starting point for conducting forensic analysis.