Record inspector
Expose identifiers, sequence values, allocated state and raw attribute summaries.
Filesystem evidence
Turn NTFS metadata into navigable context.
Forensic views can sit on the same catalog used for everyday search: MFT record relationships, timestamps, change history, paths and content identity.
Evidence graph
Correlate records without flattening away their origin.
Keep enough raw identity to inspect a file in context while still offering fast global search.
- MFT record and sequence identity
- Parent record relation
- USN change context
- Hash and duplicate clusters
- Volume and offline provenance
Investigation views
From one file to the surrounding timeline.
Parent chain
Walk from a record to its root and compare current versus historical location.
Change stream
Project rename, create, delete and metadata changes into a readable timeline.
Hash relationships
See exact content matches across directories, disks and offline archives.
Timestamp comparison
Bring filesystem timestamps together without hiding their different semantics.
Volume provenance
Keep each result tied to the volume and capture state from which it originated.
Concept boundary: this test page demonstrates information architecture and WebFarm rendering. It is not claiming an evidentiary chain-of-custody workflow yet.
DB row navigation test:
Home row
Docs row