Directories ¶
Path | Synopsis |
---|---|
Find forensic artifacts in mount points or on the live system.
|
Find forensic artifacts in mount points or on the live system. |
Log forensic artifacts information in ECS schema.
|
Log forensic artifacts information in ECS schema. |
Log Windows event logs information in ECS schema.
|
Log Windows event logs information in ECS schema. |
Mount forensic disk images for read-only processing.
|
Mount forensic disk images for read-only processing. |
Mount forensic raw or dd disk images for read-only processing.
|
Mount forensic raw or dd disk images for read-only processing. |
Click to show internal directories.
Click to hide internal directories.