OPEN SOURCE SEC

ForensiX

ForensiX is an AI-powered digital forensics platform purpose-built for investigating security incidents on macOS. It automates the heavy lifting of forensic analysis by ingesting raw evidence, identifying file formats, extracting timeline events, and surfacing anomalies.

Explore platform

Mode

Evidence-first

Classical detection runs before AI synthesis, so the model reasons over a compact case summary.

Speed

Minutes, not hours

Automated parsing, timeline reconstruction, and anomaly detection shorten the manual review loop.

Scope

macOS incident response

Built for compromised endpoints, targeted attacks, and structured investigator reports.

# Case snapshot [1] Evidence ingested from disk images, logs, and artifacts [2] File formats identified and normalized for analysis [3] Timelines rebuilt from timestamps and event chains [!] Anomalies flagged with framework mapping and priority _

01· Why it exists

Forensic work is often slowed down by repetitive manual cleanup, scattered artifacts, and too much low-value data. ForensiX is designed to absorb that overhead so investigators can focus on the incident, not the plumbing.

02· How it works

> Ingests raw evidence from disk images, logs, and forensic artifacts.
> Uses indicator matching, frequency analysis, and temporal anomaly detection first.
> Hands the AI a compact case summary so the final reasoning stays focused and grounded.

03· What it delivers

ForensiX turns scattered artifacts into structured reports with threat framework mapping, timeline reconstruction, and prioritized findings.

The result is faster triage, clearer handoff, and a case summary that supports real incident response work instead of burying investigators in raw data.