zfs snapshot diff forensic analyzer — free browser tool | fatcousin

drop zfs snapshot diff (zfs diff output) · parse changes between snapshots · runs locally

input

drop zfs diff output (multi-file)

capture: zfs diff pool/dataset@snap1 pool/dataset@snap2

Select file

parses +/-/M/R lines · rename pairs · permission hints · sensitive path rules

limits

heuristic screener · parses artifacts locally · not definitive proof · no live zfs pool access

status

>ready