Turbinia Logo

Turbinia

0
Free
Visit Website

Turbinia is an open-source framework for deploying, managing, and running distributed forensic workloads. It automates the running of common forensic processing tools to help with processing evidence in the Cloud, scaling the processing of large amounts of evidence, and decreasing response time by parallelizing processing. Turbinia is composed of different components for the client, server, and workers, which can be run in the Cloud, on local machines, or as a hybrid of both. The client makes requests to process evidence to the server, which creates logical jobs and schedules forensic processing tasks to be run by the workers. Evidence is split up by the jobs when possible, and many tasks can be created to process the evidence in parallel. Workers run continuously to process tasks, and any new evidence created or discovered by the tasks is fed back into Turbinia for further processing.

FEATURES

ALTERNATIVES

A command-line tool for searching and extracting strings from files with various options like ASCII and Unicode string search.

A DFVFS backed viewer project with a WxPython GUI, aiming to enhance file extraction and viewing capabilities.

A software that collects forensic artifacts on systems for forensic investigations.

usbdeath is an anti-forensic tool that manipulates udev rules for known USB devices and performs actions on unknown USB device insertion or specific USB device removal.

A python module for orchestrating content acquisitions and analysis via Amazon SSM.

Custom built application for asynchronous forensic data presentation on an Elasticsearch backend, with upcoming features like Docker-based installation and new UI rewrite in React.

A framework for orchestrating forensic collection, processing, and data export.

Remote Acquisition Tool

PINNED