// artifact family
specialized sensors — subpoena returns / warrant returns
42 browser-only forensics tools in this catalog group — browse by artifact family when you know the kind of evidence you are working with, not the investigation pattern.
tools in this family
ordered as in the forensics catalog. every tool runs locally — no upload, no account.
- google geofence warrant return analyzerdrop google geofence warrant return · parse anonymized device list + step-by-step deanonymization · runs locally
- google keyword warrant return analyzerdrop google keyword warrant return · parse anonymized search list · runs locally
- google reverse location warrant return analyzerdrop google reverse location warrant return · parse device list · runs locally
- apple find my subpoena return analyzerdrop apple find my subpoena return · parse device sightings · runs locally
- apple icloud subpoena return analyzerdrop apple icloud subpoena return · parse account artifacts · runs locally
- apple imessage subpoena return analyzerdrop apple imessage subpoena return · parse delivery records · runs locally
- cell tower dump csli bulk forensic analyzerdrop cell tower dump bulk csli · parse phone presence at tower over time window · runs locally
- cell tower dump tower overlap analyzerdrop multi-tower cell dump · identify phones present at overlapping windows · runs locally
- pen register trap and trace output normalizerdrop pen/trap output · parse dialed numbers + meta · runs locally
- title iii wiretap content meta separatordrop title iii wiretap export · separate content from meta + maintain chain · runs locally
- bank subpoena response normalizer bank of americadrop boa subpoena response · parse account activity · runs locally
- bank subpoena response normalizer jpmcdrop jpmc subpoena response · parse account activity · runs locally
- bank subpoena response normalizer wells fargodrop wells fargo subpoena response · parse account activity · runs locally
- bank subpoena response normalizer citibankdrop citibank subpoena response · parse account activity · runs locally
- bank subpoena response normalizer chasedrop chase subpoena response · parse account activity · runs locally
- bank subpoena response normalizer european banksdrop european bank subpoena response · normalize format · runs locally
- telco subpoena response normalizer attdrop at&t subpoena response · parse subscriber + call records · runs locally
- telco subpoena response normalizer verizondrop verizon subpoena response · parse subscriber + call records · runs locally
- telco subpoena response normalizer tmobiledrop t-mobile subpoena response · parse subscriber + call records · runs locally
- telco subpoena response normalizer sprintdrop sprint legacy subpoena response · runs locally
- social media subpoena response normalizer facebookdrop facebook subpoena response · parse account artifacts + posts + messages · runs locally
- social media subpoena response normalizer instagramdrop instagram subpoena response · parse account artifacts · runs locally
- social media subpoena response normalizer snapchatdrop snapchat subpoena response · parse account artifacts + memories · runs locally
- social media subpoena response normalizer tiktokdrop tiktok subpoena response · parse account artifacts · runs locally
- social media subpoena response normalizer discorddrop discord subpoena response · parse account + message data · runs locally
- social media subpoena response normalizer twitter xdrop twitter / x subpoena response · parse account + dm data · runs locally
- social media subpoena response normalizer redditdrop reddit subpoena response · parse account data · runs locally
- cloud provider preservation response analyzer awsdrop aws preservation response · parse artifacts retained · runs locally
- cloud provider preservation response analyzer gcpdrop gcp preservation response · runs locally
- cloud provider preservation response analyzer azuredrop azure preservation response · runs locally
- dns provider subpoena response normalizerdrop dns provider subpoena response · parse domain registration + activity · runs locally
- registrar subpoena response normalizerdrop domain registrar subpoena response · parse domain registration history · runs locally
- vpn provider subpoena response analyzerdrop vpn provider subpoena response (where applicable) · parse logged data · runs locally
- whois history bulk correlatordrop whois history exports · correlate registrant changes · runs locally
- payment processor subpoena response normalizer stripedrop stripe subpoena response · parse merchant + transaction artifacts · runs locally
- payment processor subpoena response normalizer paypaldrop paypal subpoena response · parse account + transaction artifacts · runs locally
- payment processor subpoena response normalizer squaredrop square subpoena response · runs locally
- exchange subpoena response normalizer coinbasedrop coinbase subpoena response · parse account + transaction artifacts · runs locally
- exchange subpoena response normalizer binancedrop binance subpoena response · runs locally
- exchange subpoena response normalizer krakendrop kraken subpoena response · runs locally
- subpoena response cross source mergerdrop multiple subpoena responses · merge into unified subject timeline · runs locally
- subpoena response completeness vs request validatordrop subpoena scope + response · check responsiveness gap · runs locally