btrfs send stream forensic extractor — free browser tool | fatcousin

drop btrfs send stream · parse changeset · runs locally

input

drop btrfs send stream · hexdump · text capture

btrfs send output · xxd/hexdump paste · multi-file merge

Select file

parses BTR\x53 header · send commands (SUBVOL/SNAPSHOT/WRITE/UNLINK…) · PATH/UUID TLVs · best-effort without kernel mount

limits

heuristic screener · best-effort binary walk with guard limits · cannot replay stream or verify CRC · indicative only

status

>ready