← All tools

fjta

https://github.com/mnrkbys/fjta

Open Source

Categories

Forensics

Description

FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), generates timelines, and detects suspicious activities.

Keywords

dfir forensic forensics linux python

Example Usage

source .venv/bin/activate
python -m pytest -q