Thanatology 26.1.0 — first public alpha
Thanatology is a cross-platform digital-forensics desktop application powered by the Exhume framework. This release includes case and evidence management, logical and physical evidence workflows, partition discovery, filesystem and artefact analysis, file viewers, timelines, multimedia analysis, and introductory memory-forensics capabilities.
Warning
This is demonstration and alpha software intended for demonstration, evaluation and testing. If you want a serious product pay some developers and use the Exhume ToolKit as a library like we are demonstrating here. It is not production-ready and must not be used as the sole basis for an investigation or evidentiary conclusion. Protect original evidence, work from appropriate copies, don't use the AI feature on public models with case data, independently validate all results, and follow applicable laws and procedures. Use of the software remains the user’s responsibility.
Known alpha limitations
- The LeechCore benchmark is experimental and to be considered unstable.
- The AI Agent Investigator is experimental and undergoing testing.
- These experimental features and their interfaces may change substantially.
- Other incomplete workflows, defects, and breaking changes should be expected during the alpha series.
- Automatic application updates are not currently available.
Downloads
- macOS Apple Silicon:
thanatology_26.1.0_aarch64.dmg - Windows x64:
thanatology_26.1.0_x64-setup.exe - Debian/Ubuntu x86_64:
thanatology_26.1.0_amd64.deb - Linux x86_64 AppImage:
thanatology_26.1.0_amd64.AppImage
You can also download each from the Forensicxlab website: https://www.forensicxlab.com
The macOS application is ad-hoc signed but not notarised. The Windows installer is unsigned. Operating-system trust warnings are therefore expected. Only continue after confirming that the package came from this release and verifying its checksum.