InquestiQ: A Smart Cyber Triage Tool for Modern DFIR Operations
GitHub Repository: https://github.com/kaushiktarun05/cybertriagetool
Overview
InquestiQ, hosted as CyberTriageTool on GitHub, is an open-source digital forensics and incident response (DFIR) platform built in Python. It streamlines forensic evidence triage through automation, risk scoring, visual dashboards, and professional reporting. Designed for forensic analysts and incident responders, the tool focuses on speed, accuracy, and usability.
Key Features
🔍 Evidence Ingestion
- Supports disk images and forensic artifacts
- Parses logs, registry hives, file metadata, and browser histories
🧠 Risk-Based Scoring
- Uses ML-driven anomaly detection
- Prioritizes high-risk artifacts for immediate attention
📊 Visual Dashboard
- Interactive timeline of events
- Summarized views of parsed data for rapid assessment
📄 Multi-format Reporting
- Generates reports in PDF, CSV, and JSON
- Includes artifact metadata and scoring breakdowns
🔐 Forensic Integrity
- Digital hashing for artifact authenticity
- Audit logging for chain-of-custody assurance
Technical Stack
- Language: Python (backend), JavaScript, HTML/CSS (frontend)
- Framework: Flask (inferred)
- Architecture: Modular — separate ingestion, scoring, visualization, and reporting layers
- UI: Lightweight and analyst-friendly
Installation
git clone https://github.com/kaushiktarun05/cybertriagetool.git
cd cybertriagetool
pip install -r requirements.txt
python project.py
Use Cases
- Incident Response Teams: Rapid triage during live security breaches
- Law Enforcement: Analysis and documentation of seized digital evidence
- Academia: Teaching and research in digital forensics
- Security Operations Centers (SOCs): Threat detection and event correlation
Benefits
| Feature | Description |
|----------------------|--------------------------------------------------|
| Automation | Reduces analyst workload and speeds up triage |
| Risk Prioritization | Highlights critical artifacts automatically |
| Multi-format Reports | Eases collaboration and evidence submission |
| Open Source | Customizable and community-contributable |
Development Overview
Conclusion
InquestiQ (CyberTriageTool) offers an intelligent, user-friendly solution for fast and reliable forensic triage. Its modular design and automation capabilities make it an excellent choice for professionals in cybersecurity, law enforcement, and academic research. As an open-source initiative, it welcomes contributions and enhancements from the community.
Explore and contribute: https://github.com/kaushiktarun05/cybertriagetool
Support Crack-Vault and help us keep providing free tools. Every donation counts!
(BTC) Address: bc1qhhva8uplmkaa3kkwxnux9t3y6l6kmhnwqzktzn
