Forensic Insight is a lightweight, GUI-based forensic analysis tool for Windows systems. It helps investigators gather key system data, event logs, and user activity quickly and conveniently, with both plaintext and beautifully designed HTML reports.
🔍 Live demo: https://forensicinsights.cyberfascinate.com
- ✅ Windows Event Log Collection (System, Application, Security)
- 📁 Recently Accessed Files
- 🧭 UserAssist Registry Entries
- 🌐 Network Connections Overview (TCP, UDP, Listening Ports)
- 📝 Text and Interactive HTML Report Generation
- 📊 Summary Chart with Log Statistics
- 🎛️ Intuitive GUI built using
tkinter
- Windows 10/11
- Python 3.x
- Administrator privileges
- Clone the repository:
git clone https://github.com/cyberfascinate/forensicinsight.git
cd forensicinsight- Install required modules (if not already installed):
pip install tk- Run the tool:
python forensicinsight.py-
Reports saved in:
C:\ForensicReports -
Report filenames:
- Plaintext:
Combined_Timeline_<timestamp>.txt - HTML:
Forensic_Report_<timestamp>.html
- Plaintext:
This project is licensed under the MIT License — feel free to use, modify, and distribute.
Kashish Kanojia
- 🌐 Website: cyberfascinate.com
- 🧑💻 GitHub: github.com/cyberfascinate
- 🔗 LinkedIn: linkedin.com/in/cyberfascinate
- 📧 Email: [email protected]
Feel free to fork the project and submit pull requests! For suggestions or issues, open an issue on GitHub.