API Reference

Use this page as an index for the three forensic binaries and shared model concepts.

Product APIs

Shared Concepts

  • Custody chain models in each repository under pkg/models/custody_chain.go
  • CLI config parsing in internal/config
  • Authenticated HTTP sender packages under internal/sender

Choosing The Right API

NeedPrimary package
Disk metadata analysis with TSKBitex internal/tsk
Endpoint + timeline artifact collectionTracium internal/acquisition + internal/forensics
File/package acquisition with metadata extractorsEvidex internal/acquisition + internal/metadata

Next Step

Start with one product API page above, then cross-reference shared patterns in SDK.