dfirgen

command

v0.4.1 Latest Latest Go to latest Published: Aug 16, 2026 License: MPL-2.0 Imports: 4 Imported by: 0

Documentation ¶

Overview ¶

dfirgen writes a synthetic Windows triage tree for DFIR-shaped testing and demos: event logs, registry hives, prefetch, IIS logs, PowerShell history. Deterministic for a given -mb and -seed.

go run ./tests/cmd/dfirgen -dir /path/to/share/host1 -mb 2048

Source Files ¶

View all Source files

main.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL