usb-forensic
USB device-history correlation engine — reconstructs USB connection history from every Windows artifact (registry, SetupAPI, event logs, LNK) plus macOS/Linux, and scores cross-source timestamp consistency by tamper-independence. Runs headless on any OS; pipeline-native JSONL, reproducible, panic-free.
View on Github
Activity
- Latest release
- 2w ago
- Total releases
- 5
- Cadence
- ~11 days
- Last 12 months
- 5
Reach
- Downloads
- 206
- Stars
- 0
Details
- License
- Apache-2.0
- First release
- Jul 13, 2026
Releases