| Tool | Vendor | Pricing | Version |
|---|---|---|---|
| Velociraptor | Rapid7 | Free | 0.73 |
| KAPE | Kroll | Free | 1.3 |
| Binalyze AIR | Binalyze | Per endpoint | 4.2 |
Targeted collection tools acquire high-value artefacts and volatile data without performing a full disk image. Faster and less intrusive than full imaging, these tools are suited to live response scenarios and remote endpoint investigation.
| Tool | Vendor | Pricing | Version |
|---|---|---|---|
| Velociraptor | Rapid7 | Free | 0.73 |
| KAPE | Kroll | Free | 1.3 |
| Binalyze AIR | Binalyze | Per endpoint | 4.2 |