rasheed-cy/digitalforensicstool

Digital Forensics Toolkit is a desktop Windows-artifact forensics application. Its primary workflow is a Tkinter interface offering automatic collection and individual artifact viewers; the automatic-collection screen creates a case, gathers evidence, computes SHA-256 hashes, and packages results. Separate artifact modules cover thumbnail caches, Jump Lists, Recycle Bin, Prefetch, ShimCache, Amcache, SRUM, and $MFT. The supplied excerpts confirm several parser behaviors and the case manager, but not the full collector-to-hasher/report wiring, so those uncertain links are omitted.