ForensiX Studio

⚠️ LEGAL DISCLAIMER

ForensiX Studio is intended strictly for authorized digital forensics, security research, and defensive analysis.

• ✅ Analyze files you own
• ✅ Analyze files with explicit permission
• ✅ Use in labs, CTFs, or research environments
• ❌ Do NOT analyze unauthorized data or systems
• ❌ Do NOT use for malicious activity

Unauthorized use may violate applicable laws.

Read full disclaimer in DISCLAIMER.md.

🔥 What Makes ForensiX Different

ForensiX is NOT just a file analyzer.

It is a forensic intelligence engine that:

• Correlates multiple signals — entropy, IOCs, strings, file structure, and threat intel into a unified risk score
• Explains findings — generates human-readable reasoning, not raw dumps
• Maps to MITRE ATT&CK — connects behavior to real-world attack techniques
• Classifies malware behavior — infers ransomware, infostealer, RAT, or loader patterns
• Builds behavioral profiles — describes what the file actually does
• Performs anomaly detection — identifies inconsistencies like disguised file types
• Generates forensic reports — structured, analyst-ready HTML reports
• Correlates across cases — detects shared indicators across multiple files
• Provides impact assessment — explains real-world consequences and recommended actions

🧠 Core Intelligence Engine

ForensiX combines:

• Static analysis
• Heuristic scoring
• Behavioral inference
• Threat correlation
• Contextual reasoning

📊 What ForensiX Detects

🔍 File Intelligence

• File type (true vs extension)
• MIME + magic validation
• Entropy analysis (packing detection)

🌐 Threat Indicators (IOCs)

• IP addresses (internal/external)
• Domains (suspicious TLDs, entropy)
• URLs and network endpoints

🧬 Malware Signals

• Credential patterns
• Tokens, secrets, auth artifacts
• Encoded payloads
• Suspicious command usage

🎯 MITRE ATT&CK Mapping

• Execution techniques
• Command & Control
• Credential Access
• Obfuscation methods

🧠 Behavioral Analysis

• Network communication patterns
• Data exfiltration indicators
• Persistence / execution clues

📄 Forensic Report Output

Generates structured HTML reports including:

• Executive summary
• Risk classification
• Confidence score
• Behavioral profile
• MITRE mapping
• IOC breakdown
• Anomaly detection
• Timeline reconstruction
• Impact assessment

🚀 Features Overview

• 🔥 Multi-signal risk scoring engine
• 🧠 Malware family classification
• 🌐 IOC enrichment & intelligence
• 🎯 MITRE ATT&CK integration
• 📊 Risk breakdown system
• 🧬 Anomaly detection engine
• 📄 Automated report generation
• 🔗 Case-level correlation engine
• ⚡ Threaded analysis pipeline

📦 Installation

git clone https://github.com/AquibPro/ForensiX-Studio.git
cd ForensiX-Studio
pip install -r requirements.txt
python main.py

🚀 Usage

ForensiX Studio can be used in two ways:

🧑‍💻 Method 1: Developer Mode

git clone https://github.com/AquibPro/ForensiX-Studio.git
cd ForensiX-Studio
pip install -r requirements.txt
python main.py

⚡ Method 2: Standalone Executable (Recommended)

No setup required.

1. Go to dist folder
2. Download: ForensiX_Studio.exe
3. Run directly

✔ No Python required ✔ No setup needed

🖥️ Evidence Overview

The most important tab provides:

• Risk score + classification
• Confidence level
• Malware family inference
• Threat intelligence summary
• Behavioral profile
• Impact preview
• Entropy indicators
• Anomaly detection
• Timeline summary

⚙️ Analysis Pipeline

1. File ingestion
2. Metadata extraction
3. Entropy analysis
4. IOC extraction
5. String intelligence
6. MITRE mapping
7. Correlation + scoring
8. Behavioral profiling
9. Impact assessment
10. Report generation

🛡️ Security & Privacy

• Fully local analysis
• No telemetry
• No automatic uploads
• Optional threat intel

📦 Releases

Production builds available in dist folder:

• Windows .exe

🧪 Testing

python main.py

🚨 Limitations

• Heuristic-based analysis
• Possible false positives
• Limited threat intel without APIs
• Large files may slow analysis

🔮 Future Enhancements

• PDF reports
• Live threat intelligence
• Plugin system
• Cross-platform builds

🤝 Contributing

PRs and issues welcome.

📄 License

See LICENSE.txt