// cybersecurity
AVAILABLE NOWDPS · v1.0.0 · Debian/Kali · x86-64
DFIR Pentester Sidekick
⬡ BETA
DFIR Pentest
Sidekick
// DPS
Digital forensics and incident response capabilities purpose-built for offensive security consultants. Collect, triage and package forensic artifacts — event logs, memory images, registry hives, prefetch, MFT — and reconstruct attacker timelines to validate your pentest findings.
Beta
DPS is currently in active development. Drop your email and we'll notify you the moment it's available.
Artifact Collection
One-command triage collection — event logs, prefetch, MFT, registry hives, browser history and scheduled tasks.
Timeline Reconstruction
Correlates file system, event log and registry timestamps into a unified attack timeline.
Malware Triage
YARA scanning, PE analysis and VirusTotal lookups for dropped executables and suspicious processes.
Memory Analysis
Process listing, injection detection and string extraction from memory images via Volatility integration.
IOC Extraction
Automatically extracts IPs, domains, hashes and registry keys as structured IOCs from collected artifacts.
DFIR Report
Packaged forensic evidence with chain-of-custody metadata and narrative timeline for client delivery.