Digital Forensics Analyzer

Overview

This project simulates a digital forensics tool that analyzes system logs, reconstructs timelines, and identifies suspicious activity for incident investigation.

Features

• Parses structured evidence logs
• Reconstructs chronological event timeline
• Detects:
  • Multiple failed logins (brute-force)
  • USB device connections
  • File exfiltration activity
  • Suspicious PowerShell execution
• Generates forensic report with findings and conclusion

Technologies

• Java
• File I/O
• Date/Time API
• Data structures (ArrayList, custom objects)

Output

• Timeline reconstruction
• Suspicious activity detection
• Generated forensic report (forensic_report.txt)

Use Case

Demonstrates real-world digital forensics and incident response workflows.

Author

Omar – Cybersecurity & Digital Forensics