代码库
DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret Hunt, process inspection, lateral movement tracking, persistence detection, and VirusTotal enrichment.
JavaScript
dfirdigitalforensicsforensicstriageincidentresponsemacosmft-parserntfs-forensicsthreatdetectionthreathuntingtimelineanalysisvirustotal