EvidenceForge v2.0.0rc2

EvidenceForge 2.0.0rc2 is a prerelease for tester evaluation. It requires Python 3.12 or newer and
should not be treated as the final 2.0 release.

Install with uv

uv tool install "https://github.com/Cisco-Talos/EvidenceForge/releases/download/v2.0.0rc2/evidence_forge-2.0.0rc2-py3-none-any.whl"
eforge version

To replace an existing EvidenceForge tool installation:

uv tool install --force "https://github.com/Cisco-Talos/EvidenceForge/releases/download/v2.0.0rc2/evidence_forge-2.0.0rc2-py3-none-any.whl"

Documentation for this candidate

• RC2 README
• Browse the complete RC2 source and documentation
• Documentation directory
• Example scenarios
• Detailed RC2 changelog

Highlights

• Resumable long-running generation with atomic, byte-identical checkpoints.
• Scenario 2.0 reusable pack authoring and portable .efpack release workflows.
• Deterministic lifecycle, source-timing, and exact publication foundations across endpoint,
  network, remote-access, proxy, IDS, and SMB evidence.
• Expanded schema guidance, IDS signature inventory, output-target support, and operator-facing
  progress reporting.
• Python 3.12 is now the minimum supported runtime.

Feedback

Please open a GitHub issue and include
the output of eforge version, the scenario or command being tested, and the smallest useful error
or reproduction details. Do not attach generated data containing sensitive source material.

The attached SHA256SUMS file covers the wheel and source distribution. GitHub also provides
automatic source archives for the immutable v2.0.0rc2 tag.