Trust Anchor Forensics — Evidence Collection and Analysis

Read full text
Authors: Thomas Jr. Perry
Cited by: 24
References: 4

Abstract

forensics.py provides forensic evidence collection and analysis capabilities. Forensic Capabilities System state capture Timeline reconstruction Artifact preservation Chain of custody tracking Part of the Trust Anchor framework for persistent threat environments.

Publication details

Journal / source
Zenodo (CERN European Organization for Nuclear Research)
Publication date
10 January 2026