PRIVATE FORENSIC WORKSPACE

Digital Evidence Command Center

Investigate, hash, document and report.

Analyzed files0

Evidence hashes0

Saved case0

ENGINELOCAL

Forensic modules / وحدات التحقيق

⌕

File Forensics

SHA-256, signatures, entropy and printable strings.

◷

Evidence Timeline

Timeline from selected file modified timestamps.

⬡

Integrity Manifest

SHA-256 manifest and JSON export.

▤

Case Management

Investigator notes and findings.

▧

PDF Reporting

Export a report of findings and hashes.

⌘

Privacy First

Files are processed in this browser.

Use only evidence you are authorized to examine. Preserve originals and work from verified forensic copies.

File forensic analysis / تحليل الملفات

Select evidence files

Awaiting files...

Evidence Timeline / الخط الزمني

Browser-provided last-modified timestamps only; not full forensic timestamps.

No timeline yet.

SHA-256 integrity manifest / سجل سلامة الأدلة

No manifest generated.

Investigation case / قضية التحقيق

Case reference

Investigator

Findings and notes

Capabilities and limitations / الإمكانات والحدود

This release performs real SHA-256 hashing, basic file signature identification, entropy estimation, printable ASCII extraction, a limited modified-time timeline, JSON manifests and PDF reports.

It does not yet run Kali, Autopsy, Volatility, Nmap, or parse disk images, EVTX, PCAP or memory dumps. A separate hardened Linux engine is required.

Educational triage utility, not a certified forensic acquisition suite. Validate findings with established forensic tools.