34+ modules · 9 clusters · one .exe

Court-defensible imaging with concurrent triple-hashing and an immutable audit log.

• Write-blocked disk / USB imagingBit-for-bit raw/dd, E01 and AFF4 acquisition with hardware-agnostic software write-blocking.
• RAM captureLive memory acquisition with volatility-compatible output.
• Concurrent MD5 + SHA-1 + SHA-256All three hashes computed in a single pass during acquisition.
• BSA Section 63 certificate generatorTwo-part electronic-evidence certificate template compliant with Bharatiya Sakshya Adhiniyam §63.
• HMAC-chained audit logImmutable, encrypted, ISO 27001-aligned chain-of-custody log.

Deep Windows internals, browser and dark-web forensics, filesystem analysis.

• Windows Registry triageSAM · SYSTEM · SOFTWARE · NTUSER — users, USB history, recently-opened files.
• Browser & dark-web forensicsChrome, Firefox, Edge and Tor — history, downloads, cookies, session data.
• Partition / filesystem analyzerMBR and GPT parsers with NTFS/FAT/exFAT metadata extraction.

The India stack: UPI, Indic messengers, TrueCaller — none of which foreign tools parse well.

• UPI / Wallet triagePaytm, PhonePe, Google Pay and BHIM transaction reconstruction with VPA + UTR extraction.
• Encrypted comms extractionWhatsApp, Telegram and Signal — chats, media, deleted-message recovery.
• TrueCaller / contact mappingVisual suspect-network graphs from contact-book and call-log crossmatch.

The full new Indian criminal code — BNS, BNSS, BSA — as an offline RAG assistant.

• BNS / BNSS / BSA corpus + RAG Q&AFull offline text with retrieval-augmented question-answering; no cloud, no leakage.
• IPC ↔ BNS / CrPC ↔ BNSS / IEA ↔ BSA translatorSection-by-section old-to-new mapping with cross-references.
• Procedural guidance in plain Englishe.g. seizure rules under BNSS §105, arrest procedure under BNSS §35.

Draft memos, red-team your own file, OCR eight Indic scripts — all air-gapped.

• BNSS-compliant auto-draftingSearch memos, seizure lists, FIR drafts and panchnama templates.
• Defense Vulnerability Scanner'Red team' pass over your investigation — flags procedural lapses and timestamp gaps a defence lawyer will exploit.
• Indic OCR + translationHindi, Tamil, Telugu, Marathi, Bengali, Punjabi, Gujarati, Kannada.
• Neuro-linguistic threat scoringCoercion, deception, grooming and distress markers in transcribed statements.

Synthetic media detection and hidden-data discovery.

• Deepfake / synthetic-media detectionError-level analysis, noise residual, metadata anomaly scoring.
• Steganography detectionLSB and DCT-domain hidden-payload scans across common carriers.
• Entropy analysisLocates likely encrypted regions on unallocated space and containers.

Mobile, network, crypto, GPS, YARA — the long tail investigators need on scene.

• Mobile (Android) forensicsContacts, SMS, call logs, installed apps, saved WiFi networks.
• Network / PCAP analysisTOR detection, exfiltration alerts, protocol reconstruction.
• Cryptocurrency forensicsBTC, ETH, Monero — Indian exchange address tagging, seed-phrase detection in seized notes.
• Social-media artifact extractionCached posts, DMs, media from Instagram, X, Facebook.
• GPS / location forensicsTimeline reconstruction from photo EXIF, cached maps and app databases.
• Password recoveryOffline hash-ID + dictionary + rule-based cracking. No cloud submission.
• YARA malware / IOC scanningIndia-specific rulepack for banking trojans, IMEI spoofers, SIM-swap kits.

Every AI step runs on-device. No API keys, no telemetry, no cloud round-trip.

• Entity extractionAadhaar, PAN, phone, email, UPI VPA, IFSC, IMEI, FIR number, card numbers.
• Sentiment & threat classificationStatement transcripts scored for hostility, intent and coercion cues.
• Timestamp-anomaly detectionBackdated, future-dated and edited timestamps across filesystems and app databases.
• Document classifier + AI report generatorAuto-classifies seized documents and drafts a first-pass investigation report.

Two people, one tool: the constable in the field and the analyst at the lab bench.

• Field Officer ModeOne-click red-flag triage in under 5 minutes on scene.
• Analyst Lab ModeHex viewer, SQL carving, timeline builder, keyword search — full analyst surface.