You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Open-source Windows forensics framework that checks whether independent artifacts (Prefetch, EVTX, Registry, MFT) corroborate each other, with deterministic, explainable results for examiner review.
Chronoscope ingests artifacts from many sources (file system metadata, browser history, Windows event logs, Sleuth Kit body files), normalizes every timestamp to UTC, and merges them into one sorte…