Evidence: Tortoise Git Logs
Description: Collect Tortoise Git Synchronization Logs
Category: Applications
Platform: windows
Short Name: trtl
Is Parsed: No
Sent to Investigation Hub: No
Collect File(s): Yes
Background
TortoiseGit is a Windows Shell Interface to Git that maintains logs of Git operations including commits, pulls, pushes, and synchronization activities with remote repositories.
Data Collected
This collector gathers structured data about tortoise git logs.
Collection Method
This collector gathers TortoiseGit log files from the Local AppData directory containing Git operation history.
Forensic Value
TortoiseGit logs reveal Git repository operations, commit activities, repository URLs, and synchronization events. This helps identify code repositories accessed, commits made, and can reveal unauthorized repository access or intellectual property theft.