forensicnomicon
v1.6.0 ExperimentalThe ForensicNomicon — comprehensive DFIR artifact catalog: UserAssist, Shimcache, Amcache, Prefetch, $MFT, ShellBags, EVTX, NTDS.dit, SAM, SRUM, LNK, Jump Lists + KAPE/Velociraptor/Sigma/MITRE. Zero deps.
Quick Verdict
- ✓Actively maintained (updated 1d ago)
- ✓Trusted by 285 crates
- ✓Permissive license (Apache-2.0)
Security
Deep Insights
10.3K downloads in the last 30 days (343/day), up 661% from the previous period.
285 crates depend on forensicnomicon. Reasonable ecosystem adoption, though not yet a core dependency.
The primary maintainer publishes 186 crates. This suggests deep Rust expertise and long-term commitment to the ecosystem.
4.4MB is relatively large. May impact download and compile times.
Notable dependents include ntfs-core, shellitem, ntfs-forensic, iso9660-forensic, usnjrnl-forensic. When high-quality crates choose forensicnomicon, it's a strong quality signal.
Health Breakdown
Recency, release consistency, active ratio
Yanked ratio, deps, size, maturity, features
Reverse deps, ownership, ecosystem
Downloads, momentum, growth trend
Docs, repo, license, metadata
Download Trend
Top Dependents
Most downloaded crates that depend on forensicnomicon
Version Adoption
Release Timeline
Feature Flags
default =["std"]