Digital forensics

ForensicsWarden

After an incident, evidence is everything. ForensicsWarden keeps forensic agents' collection and analysis defensible.

In the pipeline — products publishing now

The ForensicsWarden store

Stocking up now: a 50-product roadmap is in production and new self-serve kits publish daily — 0 live products today. Start free below while the shelves fill.

How the ForensicsWarden ecosystem runs

Three loops feed each other — content brings readers, readers become buyers, buyers climb the ladder.

📝 Content loop

Digital forensics explainers, checklists, and teardown playbooks — the Digital forensics library with no home until now.

🧲 Lead loop

Digital forensics teams find the content, grab the free playbook, and climb into the ForensicsWarden product line.

🪜 Product loop

$19 starter kits climb to $29 tools and templates, $49 packs and decks, and $149 flagship kits.

Start here

Three free or cheap entry points — pick whichever fits.

1

Free MIT playbook

The ghostcorpnet playbook — free, MIT-licensed. Read it here →

2

The $5 AI Agent Risk Scan

A five-minute self-audit of your agent setup. Get the scan →

3

Browse the catalog

Every ghostcorpnet product in one filterable grid. Open the catalog →

Build on ForensicsWarden

Every ecosystem follows the open ghostcorpnet Pack Standard v1 — interoperable packs, a public directory, and a certification badge.

Stores in ForensicsWarden

50 specialized stores — each one a sub-niche of Digital forensics. New kits publish daily.

Chain of Custody Store

SHA-256 hashing and transfer logs

1 in the pipeline

Browse the store →

Order of Volatility Store

RAM first, disk last

1 in the pipeline

Browse the store →

Write Blocker Protocols Store

Image-then-analyze discipline

1 in the pipeline

Browse the store →

Memory Forensics Store

Analyzing agent runtime memory

1 in the pipeline

Browse the store →

Log Integrity Store

Tamper-evident AI logs

1 in the pipeline

Browse the store →

Timeline Analysis Store

Reconstructing AI incident timelines

1 in the pipeline

Browse the store →

Model Artifact Forensics Store

Forensics on model files

1 in the pipeline

Browse the store →

Prompt Injection Forensics Store

Investigating prompt attacks

1 in the pipeline

Browse the store →

Data Exfiltration Store

Tracing AI data exfiltration

1 in the pipeline

Browse the store →

Insider Forensics Store

Forensics for insider cases

1 in the pipeline

Browse the store →

Cloud Forensics Store

AI in cloud environments

1 in the pipeline

Browse the store →

Mobile Forensics Store

AI on mobile devices

1 in the pipeline

Browse the store →

Network Forensics Store

Tracing AI network activity

1 in the pipeline

Browse the store →

Legal Hold AI Store

Preserving AI evidence

1 in the pipeline

Browse the store →

Expert Testimony Store

Testifying on AI forensics

1 in the pipeline

Browse the store →

Lab Accreditation Store

Accrediting AI forensic labs

1 in the pipeline

Browse the store →

Tool Validation Store

Validating forensic AI tools

1 in the pipeline

Browse the store →

Report Writing Store

Writing forensic reports

1 in the pipeline

Browse the store →

Evidence Storage Store

Storing digital evidence

1 in the pipeline

Browse the store →

Training Programs Store

Forensic analyst training

1 in the pipeline

Browse the store →

Custody Trackers Store

Tracking chain of custody

1 in the pipeline

Browse the store →

Hash Verifiers Store

Verifying evidence hashes

1 in the pipeline

Browse the store →

Timeline Builders Store

Building forensic timelines

1 in the pipeline

Browse the store →

Volatility Checklists Store

Ordering collection

1 in the pipeline

Browse the store →

Imaging Planners Store

Planning forensic imaging

1 in the pipeline

Browse the store →

Log Analyzers Store

Analyzing AI logs

1 in the pipeline

Browse the store →

Report Builders Store

Building forensic reports

1 in the pipeline

Browse the store →

Readiness Scorers Store

Scoring forensic readiness

1 in the pipeline

Browse the store →

Custody Prompt Packs Store

Documenting chain of custody

1 in the pipeline

Browse the store →

Timeline Prompt Libraries Store

Narrating timelines

1 in the pipeline

Browse the store →

Report Prompt Guides Store

Writing forensic reports

1 in the pipeline

Browse the store →

Testimony Prompt Sets Store

Preparing testimony

1 in the pipeline

Browse the store →

Investigation Prompt Packs Store

Planning investigations

1 in the pipeline

Browse the store →

Tool Prompt Templates Store

Documenting tool validation

1 in the pipeline

Browse the store →

Training Prompt Guides Store

Generating training

1 in the pipeline

Browse the store →

Forensics Board Decks Store

Briefing on forensic posture

1 in the pipeline

Browse the store →

Investigation Decks Store

Presenting findings

1 in the pipeline

Browse the store →

Capability Decks Store

Presenting lab capability

1 in the pipeline

Browse the store →

Training Decks Store

Forensics training

1 in the pipeline

Browse the store →

Strategy Decks Store

Forensics strategy

1 in the pipeline

Browse the store →

Custody Log Schemas Store

Structured custody logs

1 in the pipeline

Browse the store →

Hash Registers Store

Evidence hash registers

1 in the pipeline

Browse the store →

Timeline Tables Store

Forensic timeline data

1 in the pipeline

Browse the store →

Evidence Inventories Store

Digital evidence inventories

1 in the pipeline

Browse the store →

Case Logs Store

Logging forensic cases

1 in the pipeline

Browse the store →

Hashing Utility Code Store

Evidence hashing tools

1 in the pipeline

Browse the store →

Timeline Engine Code Store

Timeline reconstruction

1 in the pipeline

Browse the store →

Custody System Code Store

Chain of custody systems

1 in the pipeline

Browse the store →

Forensics Audiobooks Store

Digital forensics, narrated

1 in the pipeline

Browse the store →

Forensics Leadership Audiobooks Store

Leading forensic labs, narrated

1 in the pipeline

Browse the store →

Works with

Cluster: Security & Trust

ForensicsWarden runs alongside its cluster siblings and plugs into related ecosystems across the ghostcorpnet constellation.

SecWarden

AI agent security

Attack your agents before someone else does: injection tests, guardrails, and tamper-evident logs.

Explore →

FraudWarden

Fraud prevention

Fraud-fighting agents that don't cry wolf.

Explore →

AuditLattice

Internal audit

Audit agents with evidence-grade trails.

Explore →

SourceLattice

Open-source agent stacks

Ship open-source agent stacks with governance baked in, not bolted on.

Explore →

IncidentLattice

Agent incident response

When your AI agent goes wrong at 3am, this is the playbook.

Explore →