Logicytics: System Data Harvester

A powerful tool designed to harvest and collect a wide range of windows system data for forensics.
Admin

Harvest data from Windows System

Logicytics is a cutting-edge tool designed to meticulously harvest and collect a vast array of Windows system data for forensic analysis. Crafted with Python 🐍, it's an actively developed project that is dedicated to gathering as much sensitive data as possible and packaging it neatly into a ZIP file 📦. This comprehensive guide is here to equip you with everything you need to use Logicytics effectively.

Pre-requisites

  • Python: The project requires Python 3.8 or higher. You can download Python from the official website.
  • Dependencies: The project requires certain Python modules to be installed. You can install all the modules needed by running the following command in your terminal: pip install -r requirements.txt.

Info alert! Run the script with the admin privileges.

  • Administrative Privileges: To be able to run the program using certain features of the project, like registry modification, you must run the program with administrative privileges.
  • System Requirements: The project has been tested on Windows 10 and 11. It will not work on other operating systems.
  • Knowledge of Command Line: The project uses command line options for the user to interact with the program. It is recommended to have a basic understanding of command line options.
  • Optional: Create a .sys.ignore file in the CODE/SysInternal_Suite directory to not extract the exe binaries from the ZIP file (This is done for the OpenSSF score), if the .sys.ignore file is not found, it will auto-extract the details.

Step-by-Step Installation and Usage

  1. Install Python 🐍 If you don't have it installed, download it from the official website. Make sure to select the option to "Add Python to PATH" during installation.
  2. Install Dependencies 📦 Logicytics requires Python modules. You can install all the required modules by running the following command in your terminal: pip install -r requirements.txt
  3. Run Logicytics 🚀 To run Logicytics, simply run the following command in your terminal: python Logicytics.py -h This opens a help menu.
  4. Run the Program 👾 Once you have run the program, you can run the program with the following command: python Logicytics.py -h Replace the flags with the ones you want to use. You Must use Admin!
  5. Wait for magic to happen 🧙‍♀️ Logicytics will now run and gather data according to the flags you used.

Enjoy the gathered data 🎉 Once the program has finished running, you can find the gathered data in the "Data" folder.

After running and successfully collecting data, you may traverse the ACCESS directory as much as you like, Remove add and delete files, it's the safest directory where your backups, hashes, data zips and logs are found.

Video Demo

Configuration 🔧

Logicytics uses a config.json file to store configurations. The config.json is located in the CODE directory.

The config.json file is a JSON file that contains the following information: 

{
    "WEBHOOK URL": "",
    "ipgeolocation.io API KEY": "",
    "DEBUG": true,
    "VERSION": "X.X.X",
    "CURRENT_FILES": [
      
    ]
}

The config.json file stores the webhook URL, the API key for ipgeolocation.io, the DEBUG flag, the VERSION, and the CURRENT_FILES.

CURRENT_FILES is an array of strings that contains the names of the files you have, this is used to later check for corruption or bugs. VERSION is the version of the project, used to check and pull for updates.

Share the love ❤️ If you like Logicytics. If you have an idea or want to contribute to the project, you can submit an issue or PR on the GitHub repository. Support the dev.

Logicytics