A lean, local-first open-source DFIR log workbench. Parses Apple Unified Logs, Android Intrusion Logs, EVTX, journald, and configurable text formats into a normalized timeline with tagging, notes, and rules. Rust + egui, no server, no cloud.
log-analysis dfir digital-forensics evtx journald-logs open-soruce journald-parser evtx-parser evtx-viewer apple-unified-logs
-
Updated
Sep 3, 2026 - Rust