Digging Deeper....

FileTrove indexes files and creates metadata from them.

Go library to allow native inline hooking in windows at runtime

Live system forensic collector

A basic shell pipeline for extracting forensic artifacts from disk images. Relevant artifacts will be processed and provided in ECS format for ingestion with Logstash.

tools made in golang

Scans recursively a path to match given sha1 checksums.