Tortoise Git Logs
Overview
Section titled “Overview”Evidence: Tortoise Git Logs
Description: Collect Tortoise Git Synchronization Logs
Category: Applications
Platform: windows
Short Name: trtl
Is Parsed: No
Sent to Investigation Hub: No
Collect File(s): Yes
Background
Section titled “Background”TortoiseGit is a Windows Shell Interface to Git that maintains logs of Git operations including commits, pulls, pushes, and synchronization activities with remote repositories.
Data Collected
Section titled “Data Collected”This collector gathers structured data about tortoise git logs.
Collection Method
Section titled “Collection Method”This collector gathers TortoiseGit log files from the Local AppData directory containing Git operation history.
Forensic Value
Section titled “Forensic Value”TortoiseGit logs reveal Git repository operations, commit activities, repository URLs, and synchronization events. This helps identify code repositories accessed, commits made, and can reveal unauthorized repository access or intellectual property theft.