Thanatology is a project built using the Tauri framework to deliver a cross-platform digital forensics desktop application. It leverages the power of the Exhume toolkit as a core library and uses React with MUI to showcase how a modern application tailored for law enforcement can be developed. The goal of Thanatology is to provite an all in one Framework to perform Post-Mortem Analysis, Malware Analysis and Memory Analysis. The project is also meant to include helpfull judicial tools for a court acceptable digital forensics report.
Important
This project is in active developpement and is has not yet released.
This roadmap is dynamic, consider all of the alpha tagged release as not production ready for a real case investigation.
- Case and Evidence management.
- Sqlite Support
- Filesystem processing: (NTFS/ExFAT/ExtFS).
- FileSystem Artefact extraction.
- Logical And Physical Acquisition support.
- Disk Layout Discovery and Partition Selection for Physical Analysis.
- Optimized File Viewer.
- Terminal Intergration: (Bash, ZSH, Powershell).
- AI integration for artifacts description, content summary on demand.
- Embeded advanced Hexadecimal Editor
- Memory Forensics Basic Features
- ProcMon Artefacts Vizualisation for Malware Analysis.
TBD
We intend to build a community to participate to the creation of this tool. Join the Discord server here !
The Thanatology project is not production and not release is published yet. However you can test the application using the following commands:
git clone --recurse-submodules https://github.com/forensicxlab/exhume
git clone https://github.com/forensicxlab/thanatology
cd thanatology
npm install
npm run tauri dev