GRR Rapid Response

GRR Rapid Response is an open-source incident response framework originally developed by Google to perform remote live forensics at scale. It enables operators to collect artifacts, run forensic flows, and triage compromised endpoints remotely across large deployments. GRR supports automated hunts and flexible data collection with an emphasis on scalability and centralized management. The platform can be extended with custom modules to streamline common investigative tasks and evidence collection. GRR is commonly used by DFIR teams for fast initial triage and targeted forensic investigations.