Getting Started
This guide gets Bitex, Tracium, and Evidex running with real command patterns used by each project.
Prerequisites
- Go 1.25+
- Make (recommended)
- The Sleuth Kit (TSK) for Bitex
- Ubuntu/Debian:
sudo apt install sleuthkit - macOS:
brew install sleuthkit - Windows: Download from sleuthkit.org
- Ubuntu/Debian:
Clone And Build
Build each project from source:
# Bitex
git clone https://github.com/ilexum-group/Bitex.git
cd Bitex
make build
# Tracium
git clone https://github.com/ilexum-group/Tracium.git
cd Tracium
make build
# Evidex
git clone https://github.com/ilexum-group/Evidex.git
cd Evidex
make build
Expected output binaries:
- Bitex:
build/bitexorbuild\bitex.exe - Tracium:
build/traciumorbuild\tracium.exe - Evidex:
build/evidexorbuild\evidex.exe
Shared Required Flags
All tools require these forensic correlation flags:
--serverendpoint--tokenauthentication token--case-idcase correlation ID
Tool-specific required flags:
- Bitex:
--disk - Evidex: at least one file or directory path (plus optional
-r) - Tracium: optional
--imagefor post-mortem image mode
First Run Commands
Bitex
./build/bitex --disk /dev/sda --case-id CASE-2026-001 --server https://forensics.example/api/analysis --token YOUR_TOKEN
Tracium (live collection)
./build/tracium --server https://forensics.example/api/v1/tracium/data --token YOUR_TOKEN --case-id CASE-2026-001
Tracium (image mode)
./build/tracium --server https://forensics.example/api/v1/tracium/data --token YOUR_TOKEN --case-id CASE-2026-001 --image /mnt/images/disk.dd
Evidex
./build/evidex --server https://forensics.example/api/evidence --token YOUR_TOKEN --case-id CASE-2026-001 -r /mnt/evidence
Verify Binaries
./build/bitex --version
./build/tracium -v
./build/evidex --version
Pre-built Binaries
Download pre-built binaries from the GitHub releases page for your platform.
Cross-Platform Builds
Use the provided Makefiles to build for multiple platforms:
make build-all
make build-linux
make build-windows
Next Steps
- Read Architecture
- Continue with Bitex, Tracium, and Evidex
- Review Examples for workflow-oriented usage