CORE v1.0 · MODULE 06
ARGUS7 / DIGITAL EVIDENCE WORKBENCH
Forensics
Preservare master evidence, working copy, hash, artefatti, timeline, parent/child e chain of custody.
INPUTSOURCEMODULE ANALYSISEVIDENCEHUMAN REVIEWOUTPUT
01 / DIGITAL EVIDENCE WORKBENCH
Every visual element is derived from the case dataset.
Zoom, pan, filters, selection and details expose entities, relationships, Source IDs and Evidence IDs. No automatic rotation or random data.
02 / MODULE SPECIFICATION
Purpose, responsibility and operational boundaries.
This page preserves the names, agents, routing and dependencies of the ARGUS7 baseline.
PURPOSE
Preservare master evidence, working copy, hash, artefatti, timeline, parent/child e chain of custody.
PROTOTYPEA
INPUTSINPUTS
- Immagine forense
- File e log
- Output Cyber
- Metadati di acquisizione
B
PROCESSPROCESS
- Acquisition
- Hash verification
- Artifact extraction
- Timeline normalization
- Derived evidence creation
C
ACTIVATED AGENTSACTIVATED AGENTS
- Forensic Agent locale
- Anomaly Timeline Analysis
- HITL Validation
D
TOOLS / SOURCESTOOLS / SOURCES
- Tool forensi locali
- CFReDS
- Evidence Management
- Project Memory / RAG
E
VALIDATION / EVIDENCEVALIDATION / EVIDENCE
- Master evidence immutabile
- Hash per trasformazione
- Ripetibilità
- Chain of custody
F
OUTPUTOUTPUT
- Evidence tree
- Artifact timeline
- Chain-of-custody log
- Forensic report
CONNECTED MODULES / COMPONENTS
VisionCyberInvestigationsEvidenceReport
03 / EVIDENCE ↔ INTERPRETATION
Control language follows the module's actual function.
ATTACK ↔ DEFENSE is not forced where it has no investigative meaning.
- Master
- Working copy
- Hash
- Chain of custody
- Artifact
- Timeline
- Derived item
- Finding support
04 / CONNECTED CASES
The module does not operate in isolation.
The same case studies traverse multiple modules, using one data model and one evidence chain.
CASE-CY-2023-001INTERACTIVE DEMONSTRATION
REAL PUBLIC CYBERSECURITY CASE
MOVEit Transfer / CL0P
5 EVIDENCE · 4 RELATIONSHIPSCyber · Intel · Investigations · Graph · Forensics · Research · StrategyCASE-SC-2024-003INTERACTIVE DEMONSTRATION
REAL SOFTWARE SUPPLY-CHAIN CASE
XZ Utils / CVE-2024-3094
5 EVIDENCE · 4 RELATIONSHIPSResearch · Cyber · Forensics · Intel · Graph · Investigations · StrategyCASE-DF-2026-004FORENSIC BENCHMARK
FORENSIC BENCHMARK / DOCUMENTED SIMULATED EVIDENCE