MAESTRO FORENSICS
Linux forensic analysis tool specialized for Linux server environments
MAESTRO WiSDOM Linux
Digital forensic platform optimized for Linux environments
OS Artifacts
[ 250 or more ]
File System Analysis
[ File System Viewer ]
Timeline Analysis
[ Timeline Analyzer ]
Correlation Analysis
[ Email, Image, and AI Correlation ]
OCR Text Extraction
[ Multilingual Translation ]
MAESTRO WiSDOM Linux
Specialized Linux forensic solution
- Supports various file systems such as XFS, EXT3, EXT4, and BTRFS.
- Provides optimized artifacts related to Linux server connection traces
- Provides a professional viewer for easy analysis of authentication-related logs
- Various digital evidence analysis with an intuitive UI and powerful features
MAESTRO WiSDOM Linux - Key Features Shortcut
Data Recovery / File Carving
Data Recovery / File Carving Support
Linux Major File Recovery (Log Files, etc.) / Carving
1400+ file type carving possible
Physical recovery of carving files and additional analysis via Wisdom
Provides OCR text extraction / translation
OCR text extraction from image, video, and audio files
Full support for Korean text
Multilingual translation feature provided (English, Japanese, Chinese)
Support for automatic translation of extracted text
Provides a dedicated viewer for timeline analysis
Supports time series classification for all extracted artifacts
Provides filtering based on activity categories
Provides filtering such as key keywords
Anyone can easily derive results through advanced filtering features.
Provides a specialized viewer for correlation analysis
Provides correlation analysis features based on file name/path and user information
Provides correlation analysis capabilities for major Linux artifacts
Provides image/video file correlation analysis function
Provides network/process/device-based correlation analysis capabilities
Various graph layouts are possible to view intuitive data flow.
Firewall, Web Logs, Web Browser Analysis
Analysis of firewall basic information, configuration information, iptables, nftables, ufw, and firewalld information
Apache, nginx, Node.js Web Log Analysis
Firefox web browser usage history analysis
Web shell detection analysis
Web shell data collection and classification
Provides a specialized viewer for web shell detection
Provides Web shell analysis results using dedicated categories
Ransomware Investigation Analysis
Automatic collection of suspected ransomware file extensions
Automatic collection of ransomware note files
Ransomware behavior-based artifact collection
Backup neutralization pattern detection
Support for Linux core forensic artifact analysis
Scheduler, automatic execution information analysis
Analysis of auto-execution daemons such as Cron, Anacron, and At
Analysis of user account creation/addition/deletion, sudo usage history, etc.
Analysis of application installation, execution, deletion, etc.
Linux Remote Access / Remote File Transfer Analysis
Analysis of connections such as SSH, Telnet, VNC, and RDP
SCP, SFTP, rsync connection analysis
Remote access commands, analysis of transferred files
Remote access IP and Domain extraction analysis
Linux System Log Analysis
Analysis of core authentication logs such as command history, wtmp, btmp, utmp, etc.
Extraction and analysis of security/authentication logs, failure logs, and lastlogs
IP, domain extraction and malicious IP, domain detection
Syslog, Messages, Dmesg, Kern.log, auditd analysis
Analysis of executable files / scripts / configuration files
Analysis of Linux executable files sh, bash, zsh, ksh, run, and bin
Analysis of Linux configuration files such as conf, cfg, xml, json, yaml, etc.
Extraction and analysis of source files in Python, C, C++, Java, JavaScript, HTML, Perl, etc.
MAESTRO WiSDOM Linux
You can check out all the features of professional Linux forensic analysis through the video.
