A digital forensics and incident response (DFIR) tool for extracting, analyzing, and reporting on Discord cache artifacts. Built by jwdfir to help investigators quickly triage compromised systems, recover deleted files, and reconstruct attacker timelines.
- 🔍 Deep Cache Analysis: Parse for:
- Attachments, images, thumbnails
- Webhook URLs & API calls
- Recon and exfil files
- 📑 HTML / CSV Reports: Auto-generate forensic reports with SHA256 hashes and timestamps.
- 📦 Evidence Package Mode: Bundle artifacts, a manifest, and the HTML report into a portable ZIP.
- 🖥️ GUI & CLI: Choose between a command-line parser or a full GUI application.
- 🔒 Investigator-Friendly: Simple, self-contained tool. No Discord API keys or elevated privileges needed.
| GUI |
|---|
| CLI |
|---|
| Sample HTML Report |
|---|
| Sample CSV Timeline |
|---|
| Sample CSV Report |
|---|
