// artifact family
ai & llm forensics
30 browser-only forensics tools in this catalog group — browse by artifact family when you know the kind of evidence you are working with, not the investigation pattern.
tools in this family
ordered as in the forensics catalog. every tool runs locally — no upload, no account.
- ChatGPT conversation export forensic analyzerparse ChatGPT exports, conversation JSON, uploaded file references, and account metadata · reconstruct AI conversation timelines, deleted thread evidence, uploaded file usage, and prompt evolution · runs locally
- Claude conversation export forensic analyzerparse Claude exports and reconstruct prompt history, project usage, and AI interaction timelines · runs locally
- Google Gemini activity forensic analyzerparse Gemini activity exports and reconstruct prompts, account usage, and AI interactions · runs locally
- Microsoft Copilot artifact forensic analyzeranalyze Microsoft Copilot artifacts including prompts, coding sessions, and AI-assisted workflows · runs locally
- Cursor editor forensic analyzeranalyze Cursor IDE artifacts including AI chat history, project interactions, prompt history, and generated code evidence · runs locally
- GitHub Copilot usage artifact analyzerreconstruct GitHub Copilot usage, completions, and AI-assisted coding workflows · runs locally
- Windsurf IDE forensic analyzeranalyze Windsurf IDE artifacts and reconstruct AI coding sessions, prompts, and workspace activity · runs locally
- Local LLM model artifact forensic extractoridentify locally installed LLM models, runtimes, quantizations, and inference artifacts · runs locally
- Ollama usage artifact forensic analyzeranalyze Ollama model usage, downloads, prompts, and local inference activity · runs locally
- Stable Diffusion generation metadata extractorextract Stable Diffusion generation metadata and reconstruct image generation parameters · runs locally
- comfyui workflow forensic analyzerparse comfyui workflow json from png metadata or exports · node graph · prompts · checkpoints · export csv · runs locally
- automatic1111 artifact forensic extractorextract a1111 config · extensions · checkpoints · png parameters block · export csv · runs locally
- ai prompt history forensic analyzernormalize chatgpt · claude · gemini exports and logs · prompt timeline · model usage · export csv · runs locally
- ai generated image provenance analyzerpng tEXt chunk inventory · sd metadata · stripped metadata flag · provenance csv · runs locally
- ai generated text fingerprint analyzerlinguistic metrics · burstiness · repetition · ai likelihood score · export csv · runs locally
- llm jailbreak conversation artifact detectorscan conversation exports for dan · roleplay bypass · injection patterns · severity · export csv · runs locally
- ai coding assistant artifact forensic analyzercursor · copilot · windsurf logs · accept/reject · code provenance score · export csv · runs locally
- prompt injection artifact detectorscan documents for hidden delimiters · html comments · zero-width · bidi overrides · export csv · runs locally
- local vector database forensic analyzerchroma sqlite · faiss index · lancedb hints · collection inventory · export csv · runs locally
- embedding cache forensic extractorparse local embedding cache json · chunk previews · dimensions · export csv · runs locally
- ai model download and execution artifact analyzerreconstruct AI model downloads, installations, and execution history · correlate download logs, manifests, and filesystem artifacts · detect execution bursts and deleted models · runs locally
- huggingface cache forensic extractoranalyze HuggingFace cache artifacts and reconstruct downloaded models and datasets · parse HF_HOME caches, manifests, and transformers metadata · runs locally
- ai conversation deletion artifact detectordetect evidence of deleted or missing AI conversations across platforms · timeline gaps, orphaned attachments, missing conversation IDs, cache remnants · runs locally
- ai generated code provenance analyzeranalyze source code and identify possible AI-assisted generation provenance · boilerplate fingerprints, naming conventions, template reuse · runs locally
- ai output manipulation and editing detectordetect post-generation editing and manipulation of AI-generated text or images · metadata inconsistencies, style shifts, recompression, edit boundaries · runs locally
- ai conversation timeline reconstructormerge AI conversations from multiple platforms into a unified interaction timeline · ChatGPT, Claude, Gemini, Copilot · normalize timestamps and accounts · runs locally
- ai chatbot multi-account correlation analyzercorrelate AI chatbot accounts, sessions, and devices across platforms · detect multi-account usage, shared devices, account switching · runs locally
- ai generated image metadata stripper detectordetect removal or stripping of AI image generation metadata · missing metadata blocks, recompression, PNG chunk anomalies · runs locally
- ai synthetic voice generation artifact analyzeranalyze synthetic voice generation artifacts and identify possible AI-generated speech characteristics · spectrogram consistency, prosody, splice boundaries · runs locally
- ai transcription artifact forensic analyzeranalyze AI-generated transcription artifacts and identify transcription engine characteristics and edit history · Whisper, SRT, VTT, diarization · runs locally