PATRICT-OSINT Hardcore DFIR & File Forensics

Target File: {{ file_info.file_name }} ({{ file_info.file_size_formatted }})

DFIR & CTF Analyzer {{ timestamp }}

📁 File Metadata & Specs

Nama File	{{ file_info.file_name }}
Lokasi Path	{{ file_info.file_path }}
Ukuran File	{{ file_info.file_size_formatted }} ({{ file_info.file_size_bytes }} bytes)
Ekstensi	{{ file_info.file_extension }}

🔍 Magic Bytes Verification

Tipe File Asli	{{ forensics_data.magic_bytes_inspection.detected_file_type }}
Status Spoofing	{% if forensics_data.magic_bytes_inspection.is_extension_spoofed %} ⚠️ SPOOFED EXTENSION {% else %} ✔ VALID MATCH {% endif %}
Ekstensi yang Sesuai	{{ forensics_data.magic_bytes_inspection.expected_extensions \| join(', ') }}

📊 Shannon Entropy Analysis

Global Entropy	{{ forensics_data.shannon_entropy.entropy }} bits/byte
Rating Status	{% if forensics_data.shannon_entropy.rating == 'VERY HIGH' %} VERY HIGH {% elif forensics_data.shannon_entropy.rating == 'HIGH' %} HIGH {% else %} {{ forensics_data.shannon_entropy.rating }} {% endif %}
Interpretasi	{{ forensics_data.shannon_entropy.description }}

🔐 Cryptographic Hashes

MD5	{{ forensics_data.cryptographic_hashes.md5 }}
SHA-1	{{ forensics_data.cryptographic_hashes.sha1 }}
SHA-256	{{ forensics_data.cryptographic_hashes.sha256 }}
SHA-512	{{ forensics_data.cryptographic_hashes.sha512 }}

📷 EXIF Camera, Optics & Geolocation

Kamera Make/Model	{{ forensics_data.exif_metadata.camera_make or '-' }} {{ forensics_data.exif_metadata.camera_model or '' }}
Model Lensa	{{ forensics_data.exif_metadata.lens_model or '-' }}
Author / Hak Cipta	{{ forensics_data.exif_metadata.artist or '-' }} (© {{ forensics_data.exif_metadata.copyright or '-' }})
Waktu Pengambilan	{{ forensics_data.exif_metadata.datetime_original or '-' }}
GPS Koordinat	{% if forensics_data.exif_metadata.gps_coordinates %} {{ forensics_data.exif_metadata.gps_coordinates.latitude }}, {{ forensics_data.exif_metadata.gps_coordinates.longitude }} Buka di Google Maps ↗ {% else %} Tidak ada tag GPS di foto {% endif %}

{% if forensics_data.png_chunk_forensics and forensics_data.png_chunk_forensics.is_png %}

🧩 PNG Chunk Walker & Anomaly Inspector

{% if forensics_data.png_chunk_forensics.custom_chunks %} {% endif %} {% if forensics_data.png_chunk_forensics.anomalies %} {% endif %}

Total Chunks	{{ forensics_data.png_chunk_forensics.total_chunks_found }} Chunks Terbaca
Status CRC-32	{% if forensics_data.png_chunk_forensics.tampered_crc_detected %} ⚠️ CRC-32 TAMPERED (POTENTIAL CROP / HEIGHT TRICK) {% else %} ✔ ALL CRC-32 MATCH {% endif %}
Custom / Private Chunks	{% for cc in forensics_data.png_chunk_forensics.custom_chunks %} [{{ cc.chunk_type }}] Offset: {{ cc.offset }}, Size: {{ cc.length }}B - Preview: `{{ cc.printable_preview }}` {% if cc.xor_findings %} {% for xf in cc.xor_findings %} ✔ [XOR Cracked] {{ xf.method }}: {{ xf.decrypted_snippet }} {% endfor %} {% endif %} {% endfor %}
Anomali Chunk	{% for an in forensics_data.png_chunk_forensics.anomalies %} • {{ an }} {% endfor %}

{% endif %} {% if forensics_data.lsb_steganography_multi_channel and forensics_data.lsb_steganography_multi_channel.lsb_extracted %}

🧪 Multi-Channel LSB Steganography Engine (RGB & Alpha)

{% if forensics_data.lsb_steganography_multi_channel.extracted_urls %} {% endif %}

Kanal Dianalisis	{{ forensics_data.lsb_steganography_multi_channel.channels_analyzed \| join(', ') }}
Flag & Secret Sniffer	{% if forensics_data.lsb_steganography_multi_channel.flag_patterns_found %} {% for fp in forensics_data.lsb_steganography_multi_channel.flag_patterns_found %} {{ fp }} {% endfor %} {% else %} ✔ CLEAN (NO PLAINTEXT FLAG FOUND) {% endif %}
Extracted URLs	{{ forensics_data.lsb_steganography_multi_channel.extracted_urls \| join(' ') \| safe }}

{% endif %} {% if forensics_data.in_file_carved_segments %}

⛏️ In-File Deep Carving & Embedded Payloads

{% for seg in forensics_data.in_file_carved_segments %} {% endfor %}

#	Tipe Payload	Offset	Ukuran	File Carved Path & Hashes
{{ loop.index }}	{{ seg.detected_type }}	Offset {{ seg.offset }}	{{ seg.size_formatted }}	`{{ seg.carved_file_path }}` MD5: {{ seg.md5 }} {% if seg.interesting_strings %} Strings: {{ seg.interesting_strings \| join(', ') }} {% endif %}

{% endif %} {% if forensics_data.pdf_forensics and forensics_data.pdf_forensics.is_pdf %}

📑 PDF Document Forensics & Security Audit

{% if forensics_data.pdf_forensics.suspicious_actions %} {% endif %}

Versi PDF	{{ forensics_data.pdf_forensics.pdf_version }}
Judul Dokumen	{{ forensics_data.pdf_forensics.title or '-' }}
Author / Creator	{{ forensics_data.pdf_forensics.author or '-' }} / {{ forensics_data.pdf_forensics.creator or '-' }} (Producer: {{ forensics_data.pdf_forensics.producer or '-' }})
Waktu Dibuat	{{ forensics_data.pdf_forensics.creation_date or '-' }}
Total Halaman	{{ forensics_data.pdf_forensics.page_count }} Halaman
Status Enkripsi	{{ 'Terenkripsi (Password Protected)' if forensics_data.pdf_forensics.is_encrypted else 'Tidak Terenkripsi' }}
Temuan Keamanan	{{ forensics_data.pdf_forensics.suspicious_actions \| join(', ') }}

{% endif %} {% if forensics_data.office_forensics and forensics_data.office_forensics.is_office_doc %}

📄 Microsoft Office Forensics & Macro Audit

{% if forensics_data.office_forensics.hidden_worksheets %} {% endif %}

Tipe Dokumen	{{ forensics_data.office_forensics.doc_type }}
Author / Creator	{{ forensics_data.office_forensics.creator or '-' }}
Terakhir Diubah Oleh	{{ forensics_data.office_forensics.last_modified_by or '-' }} (Revisi: {{ forensics_data.office_forensics.revision or '1' }})
Aplikasi Pembuat	{{ forensics_data.office_forensics.application or '-' }} (v{{ forensics_data.office_forensics.app_version or '-' }})
Hidden Worksheets	{{ forensics_data.office_forensics.hidden_worksheets \| join(', ') }}
Status VBA Macros	{% if forensics_data.office_forensics.has_vba_macros %} ⚠️ VBA MACROS DETECTED {% else %} ✔ CLEAN (NO MACROS) {% endif %}

{% endif %}

PATRICT-OSINT v2.6 Hardcore DFIR & File Forensics Engine • Generated Automatically