1 · EXTRACTION
2 · FORENSICS
3 · ANALYSIS
VM Disk Image
Windows & Debian
(mounted read-only)
Python Extractor
Mount disk, pull all
binaries & libraries
Forensic Worker
Analyze binaries,
extract artifacts
Jupyter Notebook
Explore results,
build graphs
SHARED STORAGE
MinIO
Object store · files
PostgreSQL
Metadata · results
binaries + libs
paths + IDs
forensic results
read binaries
read results
Text is not SVG - cannot display