MTMeiTian Software
Data Security & Forensics

MeiTian Digital Forensics

Parses Windows USN / Linux auditd / macOS FSEvents to produce court-admissible timeline reports.

Windows USNLinux auditdmacOS FSEventsTimeline reportsAnomaly detectionCSV / JSON / PDF
Explore capabilities → FAQ →
MeiTian Digital Forensics — 取证分析全景界面
Overview

What MeiTian Digital Forensics does

MeiTian Digital Forensics is a cross-platform file-system log forensics tool that parses Windows USN journals, Linux auditd and macOS FSEvents, produces court-admissible timeline reports, and automatically detects timestamp tampering, ransomware activity spikes and bulk deletions.

Capabilities

Built for real-world scenarios

01

Multi-platform log parsing

Unified parsing of Windows USN journal, Linux auditd and macOS FSEvents file-system logs.

02

Timeline reconstruction

Reconstructs file-operation timelines into court-admissible forensic reports.

03

Anomaly detection

Detects timestamp tampering, ransomware activity spikes and bulk deletion patterns.

04

Multi-format reports

Exports CSV, JSON and forensic-grade PDF for archiving and evidence.

Product UI

See it in action

MeiTian Digital Forensics — 取证分析全景界面
取证分析全景界面
MeiTian Digital Forensics — 文件系统操作时间线
文件系统操作时间线
MeiTian Digital Forensics — 事件详情与异常标记
事件详情与异常标记
3 platforms
USN/auditd/FSEvents
Court-grade
Reports
CSV·JSON·PDF
Export
Why choose it

Key advantages

Court-admissible reportsProduces admissible forensic timelines.
Cross-platformUnified analysis across Windows / Linux / macOS.
Ransomware tracingQuickly locate anomalous activity spikes.
Multi-format exportCSV / JSON / PDF for flexible archiving.
FAQ

About MeiTian Digital Forensics

Which logs can MeiTian Digital Forensics analyze?

It parses Windows USN journals, Linux auditd and macOS FSEvents file-system logs across all three platforms to reconstruct file-operation timelines.

Can the reports be used as legal evidence?

It produces court-admissible timeline reports and exports forensic-grade PDF for archiving and evidence.

What anomalies can it detect?

Timestamp tampering, ransomware activity spikes and bulk file deletions, to aid security-incident tracing.

Learn more about MeiTian Digital Forensics

Explore more capabilities, or browse the full MeiTian product matrix.

Browse all products → FAQ →