Framework for detecting forensic artifact changes across OS/software versions using automated GUI actions in VMs.
ADARE enables researchers and forensic analysts to create reproducible experiments that automate desktop interactions in virtual machines, capture system state changes, and analyze forensic artifacts.
The ADARE web platform is available at https://adare.click/.
Full documentation is available at https://fkie-cad.github.io/adare/.
See ROADMAP.md for current development tasks, planned features, and known issues.
MIT — see LICENSE. The optional LocateAnything grounding server is excluded; see THIRD_PARTY_NOTICES.md.