initial README

This commit is contained in:
2025-12-14 17:43:11 +01:00
parent eb12fe9de0
commit 9068fed848
3 changed files with 16 additions and 3 deletions

View File

@@ -1,5 +1,8 @@
# FACTUM-NOTES
**Cryptographically Secured Forensic Logging Utility**
Cryptographically Secured Forensic Logging Utility
![Logo](resources/gemini-logo.png)
---
@@ -16,16 +19,20 @@ Designed for operation in forensic-grade, air-gapped environments, the system en
The design of Factum-Notes prioritizes integrity, low-latency input, and deployment flexibility.
### Core Integrity Mechanisms
* **Immutable Logging:** All entries are subjected to immediate SHA-256 hashing.
* **Cryptographic Non-Repudiation:** Entries are signed using the analyst's local GPG private key.
* **Temporal Verification:** Precise timestamping accompanies all signatures to establish a chronological sequence of events.
### User Interface Paradigm
The system implements a hybrid interface model:
* **CLI (Command Line Interface):** Optimized for high-velocity data entry and rapid logging during active forensic acquisition.
* **GUI (Graphical User Interface):** A lightweight PySide6 interface for complex case management, artifact linking, and review.
### Deployment Specifications
* **Single-Binary Distribution:** Compiled to a standalone executable to eliminate dependency conflicts.
* **Air-Gap Optimization:** Designed to function with zero network dependencies post-installation.
* **Cross-Platform Compliance:** Fully validated for operation on Linux and Windows NT-family kernels.
@@ -35,19 +42,23 @@ The system implements a hybrid interface model:
## FUNCTIONAL SPECIFICATIONS
### Case & Evidence Management
* **Hierarchical Structure:** Supports multiple unique cases, each containing distinct evidence containers.
* **Metadata Association:** optional storage of cryptographic hashes (MD5, SHA1, SHA256) for all associated evidence objects.
* **Tagging Taxonomy:** Implements a user-defined tagging system for cross-referencing findings across the dataset.
### Automated Parsing
* **IoC Extraction:** Integrated regex-based parsing to identify and catalog Indicators of Compromise (IP addresses, hashes, domains, crypto-currency entities) from textual notes.
* **Filtering Logic:** Boolean search capabilities across tags and extracted IoCs.
### Export Capabilities
* **Scoped Reporting:** Generation of reports limited to specific cases or evidence sets.
* **Format Support:** Output availability in raw text and Markdown formats for integration into final forensic reports.
### Key Management
* **System Integration:** Direct interfacing with the host operating systems GPG keychain (Gpg4win/GnuPG/Kleopatra).
---
@@ -68,11 +79,13 @@ The application is constructed upon a modern, verified stack to ensure maintaina
The following modules are proposed for medium-term integration:
### Heuristic Analysis Engine (LLM Integration)
* **Goal Definition:** Analyst-defined investigative objectives per case.
* **Automated Summarization:** Synthesis of complex note chains into executive summaries.
* **Procedural Guidance:** Algorithmic suggestions for next steps based on current findings and defined goals.
### Extended Functionality
* **Search Indexing:** Full-text search across the encrypted database.
* **IoC Enrichment:** External API lookup for extracted indicators (optional network connectivity required).
* **Remote Collaboration:** Synchronization capabilities via remote database backends for multi-analyst teams.
@@ -82,7 +95,7 @@ The following modules are proposed for medium-term integration:
## COPYRIGHT & LICENSE
**Copyright © 2025**
Copyright © 2025
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

0
project.toml Normal file
View File

BIN
resources/gemini-logo.png Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 5.1 MiB