Turbinia Logo

Turbinia

0
Free
Visit Website

Turbinia is an open-source framework for deploying, managing, and running distributed forensic workloads. It automates the running of common forensic processing tools to help with processing evidence in the Cloud, scaling the processing of large amounts of evidence, and decreasing response time by parallelizing processing. Turbinia is composed of different components for the client, server, and workers, which can be run in the Cloud, on local machines, or as a hybrid of both. The client makes requests to process evidence to the server, which creates logical jobs and schedules forensic processing tasks to be run by the workers. Evidence is split up by the jobs when possible, and many tasks can be created to process the evidence in parallel. Workers run continuously to process tasks, and any new evidence created or discovered by the tasks is fed back into Turbinia for further processing.

FEATURES

ALTERNATIVES

A tool for collecting and analyzing screenshots from remote desktop protocols, web applications, and VNC connections.

Anti-forensics tool for Red Teamers to erase footprints and test incident response capabilities.

TestDisk is a free data recovery software that can recover lost partitions and undelete files from various file systems.

An anti-forensic Linux Kernel Module kill-switch for USB ports.

Magnet ACQUIRE offers robust data extraction capabilities for digital forensics investigations, supporting a wide range of devices.

A comprehensive incident response tool for Windows computers, providing advanced memory forensics and access to locked systems.

libevt is a library to access and parse Windows Event Log (EVT) files.

A tool for creating compact Linux memory dumps compatible with popular debugging tools.