Installation instructions


Note that using pip outside virtualenv is not recommended since it ignores your systems package manager. If you aren’t comfortable debugging package installation issues, this is not the option for you.

Create and activate a virtualenv:

virtualenv artifactsenv
cd artifactsenv
source ./bin/activate

Upgrade pip and install Forensics Artifacts dependencies:

pip install --upgrade pip
pip install artifacts

To deactivate the virtualenv run:


Ubuntu 22.04 LTS

To install Forensics Artifacts from the GIFT Personal Package Archive (PPA):

sudo add-apt-repository ppa:gift/stable

Update and install Forensics Artifacts:

sudo apt-get update
sudo apt-get install python3-artifacts


The l2tbinaries contains the necessary packages for running Forensics Artifacts. l2tbinaries provides the following branches:

  • main; branch intended for the “packaged release” of Forensics Artifacts and dependencies;

  • staging; branch intended for testing pre-releases of Forensics Artifacts;

  • dev; branch intended for the “development release” of Forensics Artifacts;

  • testing; branch intended for testing newly created packages.

The l2tdevtools project provides an update script to ease the process of keeping the dependencies up to date.

The script requires pywin32.

To install the release versions of the dependencies run:


C:\Python38\python.exe tools\ --preset artifacts