About Peach
Peach is a local-first forensic log viewer for digital forensics and incident response. It reads several kinds of event and system logs, including Apple unified logs, Windows event logs, journald records, and text logs configured with TOML. The program normalizes the input into a timeline that analysts can tag and search. Its search syntax is described as similar to that used by log-analysis tools, and its session layer stores analyst tags in SQLite. This gives an investigator a way to review events from multiple sources in a common view and preserve annotations for a session. Peach is described as running locally without a server or cloud service. It can be used on its own or receive evidence paths from a related tool, though that integration is not required.
Categories
Platforms
Website & Downloads
Trusted package or store listing
Related software
- 360文件夹 — 360文件夹 is a file explorer designed to place multiple folder views in one window.
- 4GB Patch — 4GB Patch changes the large-address-aware flag in certain 32-bit executable files.
- 4gb-patch — 4gb-patch modifies 32-bit Windows executables so they can use up to 4 GB of virtual address space when run on a 64-bit platform, rather than the 2 GB limit described for ordinary 32-bit applications.
- 7-max — 7-max runs selected Windows applications using large memory pages rather than the small pages Windows normally uses.
- 7tsp — 7tsp is a Windows theme patching utility for customizing the operating system's visual appearance.
- AD Account Reset Tool — AD Account Reset Tool helps helpdesk technicians unlock Active Directory accounts and reset user passwords through a graphical interface.
