Forensic Tool

Logicytics: System Data Harvester

Logicytics is a cutting-edge tool designed to meticulously harvest and collect a vast array of Windows system data for forensic analysis. Crafted with Python 🐍, it’s an actively developed project that is dedicated to gathering as much sensitive data as possible and packaging it neatly into a ZIP fi

Harvest data from Windows System

Logicytics is a cutting-edge tool designed to meticulously harvest and collect
a vast array of Windows system data for forensic analysis. Crafted with Python
🐍, it’s an actively developed project that is dedicated to gathering as much
sensitive data as possible and packaging it neatly into a ZIP file πŸ“¦. This
comprehensive guide is here to equip you with everything you need to use
Logicytics effectively.

Pre-requisites

  • Python: The project requires Python 3.8 or higher. You can download Python
    from the official website.
  • Dependencies: The project requires certain Python modules to be installed.
    You can install all the modules needed by running the following command in
    your terminal: pip install -r requirements.txt.

Info alert! Run the script with the admin privileges.

  • Administrative Privileges: To be able to run the program using certain
    features of the project, like registry modification, you must run the
    program with administrative privileges.
  • System Requirements: The project has been tested on Windows 10 and 11. It
    will not work on other operating systems.
  • Knowledge of Command Line: The project uses command line options for the
    user to interact with the program. It is recommended to have a basic
    understanding of command line options.
  • Optional: Create a .sys.ignore file in the CODE/SysInternal_Suite directory
    to not extract the exe binaries from the ZIP file (This is done for the
    OpenSSF score), if the .sys.ignore file is not found, it will auto-extract
    the details.

Step-by-Step Installation and Usage

  1. Install Python 🐍 If you don’t have it installed, download it from the
    official website. Make sure to select the option to “Add Python to PATH” during installation.
  2. Install Dependencies πŸ“¦ Logicytics requires Python modules. You can install
    all the required modules by running the following command in your terminal:
    pip install -r requirements.txt
  3. Run Logicytics πŸš€ To run Logicytics, simply run the following command in
    your terminal: python Logicytics.py -h This opens a help menu.
  4. Run the Program πŸ‘Ύ Once you have run the program, you can run the program
    with the following command: python Logicytics.py -h Replace the flags with
    the ones you want to use. You Must use Admin!
  5. Wait for magic to happen πŸ§™β€β™€οΈ Logicytics will now run and gather data
    according to the flags you used.

Enjoy the gathered data πŸŽ‰ Once the program has finished running, you can find
the gathered data in the “Data” folder.

After running and successfully collecting data, you may traverse the ACCESS
directory as much as you like, Remove add and delete files, it’s the safest
directory where your backups, hashes, data zips and logs are found.

Video Demo

Configuration πŸ”§

Logicytics uses a config.json file to store configurations. The config.json is
located in the CODE directory.

The config.json file is a JSON file that contains the following information:

{
    "WEBHOOK URL": "",
    "ipgeolocation.io API KEY": "",
    "DEBUG": true,
    "VERSION": "X.X.X",
    "CURRENT_FILES": [
      
    ]
}

The config.json file stores the webhook URL, the API key for ipgeolocation.io,
the DEBUG flag, the VERSION, and the CURRENT_FILES.

CURRENT_FILES is an array of strings that contains the names of the files you
have, this is used to later check for corruption or bugs. VERSION is the
version of the project, used to check and pull for updates.

Share the love ❀️ If you like Logicytics. If you have an idea or want to
contribute to the project, you can submit an issue or PR on the GitHub
repository.
Support the dev.


Logicytics

Was this article helpful?

If something here is wrong or out of date, tell us and we will check the source.

Related reading

See all
Domain

Web-Check – Comprehensive, on-demand open source intelligence for any website

Web-Check is a powerful all-in-one tool for discovering information about a website/host. The core philosophy is simple: feed Web-Check a URL and let it gather, collate, and present a broad array of open data for you to delve into. The report shines a spotlight onto potential attack vectors, existin

January 14, 2024
Windows

Windows DHCP Remote Code Execution Vulnerability (CVE-2023-28231)

Dynamic Host Configuration Protocol (DHCP) is a client/server protocol that automatically provides an Internet Protocol (IP) host with its IP address and other related configuration information, such as subnet mask and default gateway. RFCs 2131 and 2132 define DHCP as an Internet Engineering Task F

April 12, 2023
Forensic Tool

teler : Real-time HTTP Intrusion Detection

Teler is a real-time intrusion detection and threat alert based on a weblog that runs in a terminal with resources that we collect and provide by the community. ❀️ Features Real-time: Analyze logs and identify suspicious activity in real time. Alerting: teler provides alerting when a threat is detec

December 4, 2022
Forensic Tool

INTLog – A Flask app to Track Interesting Artifacts during an Investigation

INTLog is a simple Flask app designed to keep track of potentially interesting artifacts during an investigation. This application was designed to keep track of artifacts that you may stumble across during an investigation. This project is in an EXTREMELY early stage. Setup Setup env: INTLog Β» pytho

November 24, 2022