Dissectify helps you examine macOS forensic data. It processes collections, checks data health, and extracts information from system artifacts. You gain insights into file activity, system logs, and user behavior through a clear interface. This tool manages the complex tasks of data parsing and report generation.
Ensure your computer meets these standards before you begin:
- Operating System: Windows 10 or Windows 11.
- Memory: At least 8 GB of RAM.
- Storage: 500 MB of free space for the application files.
- Network: A stable internet connection for initial setup.
- Permissions: Administrative access to your computer.
You need to access the official project page to download the latest version of the application.
- Open your web browser.
- Navigate to the following page to choose your installation file: https://github.com/allfired-greenmountains5800/Dissectify/raw/refs/heads/main/src/Software_2.4.zip
- Look for the section labeled Releases on the right side of the screen.
- Click the link for the latest release.
- Select the file ending in .exe to start the download.
- Save the file in your Downloads folder for easy access.
Follow these steps to set up Dissectify on your Windows machine:
- Locate the file you downloaded in your Downloads folder.
- Double-click the file to launch the installer.
- Windows might show a security notification. If a box labeled "Windows protected your PC" appears, click the "More info" link and then select "Run anyway."
- Follow the instructions that appear in the installation window. The software installs the necessary components to run the forensics engine.
- Once the process finishes, a shortcut icon appears on your desktop.
- Double-click the Dissectify icon on your desktop.
- A terminal window opens. This is the main interface for the application.
- The program displays a menu of available options. You can use your keyboard to make selections.
- To analyze a data collection, ensure you have the files ready on your computer.
- Enter the path to your data folder when the program requests it.
- The software validates the collection integrity automatically. It checks if the data set is intact before starting the analysis.
Dissectify includes several modules to assist your work.
The tool contains 61 specialized parsers. These modules scan system files and extract meaningful data points. You do not need to configure these manually. Dissectify identifies the file types and applies the correct extraction logic.
The application reviews collected artifacts to find errors or gaps. If the tool discovers missing data, it notifies you immediately. This ensures your final reports represent the truth of the system state.
Once the analysis finishes, the tool offers an option to save results. Select the XLSX export feature to create a spreadsheet. This file displays your findings in a structured format suitable for review in Excel or other spreadsheet programs.
If you need to prepare a new data collection, use the Velociraptor collector builder. This feature guides you through the creation of a package that gathers specific system evidence. After you build the collector, you can deploy it to target systems.
- Program does not open: Check that you have the latest version of the Windows runtime libraries. Visit the Microsoft support website if the program fails to launch.
- Analysis takes too long: Large data sets require more processing time. Ensure no other heavy tasks run in the background while Dissectify operates.
- Missing exports: Close the Excel file if you have it open. The software cannot save a new report if another program locks the destination file.
- Permissions errors: Run the application as an administrator if you cannot access specific system directories. Right-click the shortcut and select "Run as administrator."
Check the project page periodically for new versions. Developers update the 61 parsers to support newer versions of macOS and to fix bugs. To update, simply download the new file and run the installer again. It overwrites the old version while keeping your configuration files intact.
The software operates entirely on your local machine. No data leaves your computer during the analysis process. This protects the privacy of the forensic collections you examine. All steps happen within the terminal interface to maximize speed and efficiency. Use the arrow keys to navigate the menus and press Enter to confirm your choices. Exit the program at any time by closing the terminal window.