Cado Host is a solution to acquire forensic artefacts from systems, into cloud storage. This enables you to perform a quick triage investigation of the target system.

Version: 0.9

This software is currently in Beta, and currently supports;

  • Linux: Debian: 9+, Ubuntu: 16.04+, Fedora: 29+, CentOS: 7+, RHEL: 6+, openSUSE: 15+, SUSE Enterprise (SLES): 12 SP2+, Alpine: 3.10+

  • MacOS: 10.13+

  • Windows: 7, 8.1, 10 (1607+) and Server 2012 R2+

Cado Host was made possible thanks to a number of supporting applications, and testers – you can view them on the acknowledgements page.


Cado Host supports uploading to Amazon AWS, Microsoft Azure and Google Cloud Storage.

It also supports storing captured files locally.

Freeware License

We are releasing Cado Host free to the security and digital forensics community.

We have released Cado Host under our Freeware License.

Secure Evidence

We would love to hear any feedback you might have.

Please contact us to let us know any feedback you might have.