Directories ¶
Path | Synopsis |
---|---|
Find forensic artifacts in mount points or on the live system.
|
Find forensic artifacts in mount points or on the live system. |
Log forensic artifacts as JSON in ECS.
|
Log forensic artifacts as JSON in ECS. |
Log Windows event logs as JSON in ECS.
|
Log Windows event logs as JSON in ECS. |
Mount forensic disk images for read-only processing.
|
Mount forensic disk images for read-only processing. |
Mount forensic raw or dd disk images for read-only processing.
|
Mount forensic raw or dd disk images for read-only processing. |
Mount forensic VMDK disk images for read-only processing.
|
Mount forensic VMDK disk images for read-only processing. |
Click to show internal directories.
Click to hide internal directories.