$ ps aux

A fast-forensics tool powered by small local LLMs that run on a personal computer.

A tool that uses local LLMs to help search, verify, and summarize related records and organize timelines from information gathered during human-led investigations.

Python tools for quickly parsing Windows Event Logs and importing them into Elasticsearch.

evtx2es is included in Tsurugi Linux [LAB], and evtx2json in DRIFT Linux.

Python tools for quickly parsing Windows artifacts and importing them into Elasticsearch.

mft2es and mft2json are included in the DFIR distribution Tsurugi Linux [LAB].

Python tools for finding files in Windows disk images and dumping them directly.

Python and Rust tools for quickly filtering large CSV files, including files of several hundred GB, using complex conditions.

A Rust and Tauri tool for flagging indicators of compromise (IOCs) in filtered CSV files.

A library for parsing artifacts from Codex CLI, Claude Code, and other AI agents.

A Rust tool that scans text for strings in other languages, such as Chinese, Russian, and Korean.

A minimal Python full-text search tool using morphological analysis of Japanese and English text, DuckDB, and BM25.

Collects information from news sites, underground forums, and other sources, using local LLMs for summarization.

Uses natural language processing for analysis and tagging, along with correlation analysis.

A hashing tool that combines anime-style names and traits, such as white-hair-sora-kasugano, to provide an output space comparable to humanhash.

A model based on OpenAI Privacy Filter, fine-tuned to filter personally identifiable information specific to Japanese.

An experiment in automating parts of forensic analysis by combining existing tools.

Merged into FORENSIA.