TREN

DIGITAL INVESTIGATIONS

Choose a file. Inspect the resulting record.

All three tools open with sample data. When you choose a real file, calculations are produced again in the browser; code is never executed.

01

File and Document Sandbox

Opens one file and shows identity, structure, findings, observables, tool records, and the evidence graph on the same screen.

  • APK, IPA, PE, .NET, and ELF
  • PDF, Office, email, and PCAP
  • YARA, ClamAV, and downloadable evidence
Open workspace
02

Version Comparison

Compares two application releases and separates new permissions, domains, imports, package paths, and signature changes.

  • Two real files
  • Added and removed records
  • Machine-readable JSON output
Open workspace
03

Container Image Inspection

Opens Docker or OCI image layers and extracts the final package inventory, binaries, and redacted secret candidates.

  • Layer changes
  • DPKG and APK package inventory
  • ELF/PE and secret candidates
Open workspace