Home

What is ForTrace and what can it do?

ForTrace is an Open Source python module to simulate user behaviour inside a virtual machine and like that creating network traffic, timestamps, files and other "real world" traces one would find in a forensic case. With this framework we opt to make data set generation accessible to the forensic community. If it is for universities to provide students with a variety of different cases or for people creating algorithms and programs aiding forensic investigators to test their products against. As everything that is happening inside the virtual machine is known it can even be used to train machine learning algorithms.

In this documentation we start by explaining how to set up ForTrace. Additionally, we will show how to use ForTrace, what it can already do and how you can extend it to fit your needs.

Contents

1. Installation

2. Architecture