A digital forensics timeline analysis tool that extracts, abstracts, and visualizes system events from disk images. Built on pytsk3 (The Sleuth Kit) for real filesystem artifact extraction, with DBSCAN-based event clustering and an interactive Dash timeline for investigating user activity and detecting anomalies.

Recover deleted files from disk images using filesystem-metadata parsing (pytsk3) and raw signature carving. Two-engine recovery for USB drives, SD cards, and disk images — real filenames when the filesystem index survives, raw carving as fallback when it doesn't.

Deep Search is a desktop GUI tool for targeted file discovery inside .img disk images. It analyzes partitions and embedded filesystems without mounting the image, then lists matching files with path, extension, size, and last modification time. The program is used in digital forensic workflows for targeted file discovery.

Interactive CLI for digital-forensics disk-image analysis: mount raw/E01 (pytsk3/pyewf), extract metadata, recover files with foremost, keyword-search PDFs, export encrypted reports.

Cross-platform read-only NTFS browsing, imaging, and recovery toolkit for Windows and Linux using pytsk3.

Forensic Intelligence Correlation Platform that bridges digital forensic analysis with OSINT by correlating temporal, spatial, and content patterns between forensic evidence and publicly available data.