File Forensics Analyzer

File Forensics Analyzer is a professional-grade file analysis tool built for investigators, IT professionals, legal teams, and security researchers.

File Forensics Analyzer is a professional-grade file analysis tool built for investigators, IT professionals, legal teams, and security researchers. Import any file and get a detailed forensic report in seconds — no technical expertise required.

Comprehensive File Analysis Every file tells a story. File Forensics Analyzer reads it. Import documents, images, emails, spreadsheets, scripts, and archives to instantly surface hidden metadata, embedded threats, timestamp anomalies, and indicators of compromise.

What File Forensics Analyzer analyzes: — PDFs: JavaScript exploits, hidden layers, embedded files, digital signatures, XMP metadata, form fields, incremental save history, and annotation authors — Word, Excel & PowerPoint: Tracked changes, hidden text, macro detection, remote template injection, custom properties, revision history, and author chain — Images (JPEG, PNG, HEIC, RAW, TIFF): Full EXIF data, GPS coordinates with Apple Maps link, editing software detection, IPTC news metadata, and OCR text extraction — Emails (EML, MSG, MBOX): SPF/DKIM/DMARC authentication, Received header chain analysis, Reply-To spoofing detection, URL shortener warnings, and punycode homograph attacks — PST/OST Archives: Message extraction, sender and recipient indexing, date range analysis, and future-dated message detection — Scripts (PowerShell, Python, Bash, VBScript): Obfuscation detection, encoded command decoding, network download indicators, and dangerous pattern scanning

Threat Intelligence Built In File hashes are checked against a bundled MalwareBazaar database of known malicious files. The IOC Extractor automatically surfaces URLs, IP addresses, email addresses, domains, and Bitcoin addresses from file content. Shannon Entropy Analysis High entropy indicates encrypted or packed content — a red flag in a document file. File Forensics Analyzer scores entropy for every file and flags anomalies automatically.

Risk Scoring Every analysis produces a 0–100 risk score with a plain-English summary: what was found, what it means, and exactly what to do next. No security background required to understand the results.

PDF Report Export Generate a professional, court-ready forensic report as a formatted PDF. Share it directly from the app via AirDrop, email, or any connected service. PST/OST archives export as formatted email transcripts.

File Persistence All analyzed reports are saved locally. Reopen the app and your entire case history is there, including full metadata and findings. Supported File Types: PDF · DOCX · XLSX · PPTX · ODT · EML · MSG · MBOX · PST · OST · JPEG · PNG · HEIC · TIFF · RAW · WebP · GIF · PS1 · BAT · VBS · Python · Shell · ICS · VCF · TXT · CSV · JSON · XML · HTML · ZIP and more

Privacy First All analysis happens entirely on-device. No files or data are ever uploaded to any server.