This IOC captures a foundational stage in the cyber kill chain: reconnaissance — where the attacker has not yet breached the system, but is actively probing to discover what might be open, unguarded, or improperly exposed.
Forensic triage instrument for disputed video evidence. Performs binary-level MP4/MOV container structure analysis of atom hierarchy, edit lists, chunk offsets, metadata, and device-class signatures to identify files warranting further forensic examination.
Add a description, image, and links to the forensic-triage topic page so that developers can more easily learn about it.
To associate your repository with the forensic-triage topic, visit your repo's landing page and select "manage topics."