anti-forensics

What problem does it solve?

Anti-forensics testing helps security teams understand and evaluate techniques attackers might use to obscure evidence, enabling defenders to design effective detection and response controls.

Core Features & Use Cases

• Identify and validate secure deletion, log cleaning, and timestamp restoration workflows within authorized engagements.
• Validate artifact cleanup against forensic tools (foremost, bulk_extractor, SleuthKit) across disk images and NTFS/ext4 filesystems.
• Use-case: Simulate a post-exploitation cleanup and verify that no residual indicators remain for incident response.

Quick Start

Execute an authorized anti-forensic cleanup workflow and validate artifact removal against forensic tools.