CipherBuilds · Windows Tool

Forensic Kit

$50

One-time purchase · No subscription · Windows 10/11

Builds a complete picture of system activity across multiple investigation layers. Activity timelines, persistence detection, USB history, login records — all in one tool.

Buy Now → Try Free Demo

Features

What Forensic Kit Does

Activity Timeline

Reconstructs file system changes, login events, and program execution history over a configurable window.

Full Forensic Scan

Runs all checks in one pass — timeline, persistence, processes, services, USB history, and login records.

Persistence Detection

Audits registry startup entries, flags suspicious scheduled tasks, checks for DLL hijacking vulnerabilities.

Process Analysis

Lists every running process and flags suspicious ones by name, risk level, and specific reason.

System Snapshots

Captures the current state of the machine for before-and-after comparison.

USB Device History

Recovers a record of every USB storage device ever connected, pulled from the Windows registry.

Pulls successful and failed login events from the Windows Security Event Log.

Network Connections

Shows all current active connections with remote addresses and ports.

Browser Extension Audit

Inventories installed extensions across major browsers.

Export Evidence

Saves a structured evidence package you can attach to a service ticket or hand to a client.

Specs

System Requirements

Platform

Windows 10 / 11 (64-bit)

License

One-time purchase — buy once, own forever

Installation

Proper Windows installer (Inno Setup)

Admin Rights

Required — forensic analysis needs administrator access

Internet Required

No — runs 100% locally, no data sent anywhere

Portable USB Mode

Yes — run a portable investigation from USB

Get Forensic Kit

$50 one-time. No subscription. No renewal fees. Yours to keep forever.

Buy Now — $50 → Try Free Demo

All purchases through Gumroad · Instant download · 50% deposit for commissions