River City Digital Forensics logo
River City Digital Forensics

DFIR Tools · Research · Blog
Downloads

Centralized release and download hub

This page provides access to current DFIR tool releases, supporting documentation, and version history. Each release includes package details and verification data to support integrity validation and consistent, reliable use.

*All tools are independently developed and intended for analytical and investigative use.

Release

Interactive Sign-In Analyzer

Windows package · investigator-focused telemetry analysis
SHA-256:
_hash_value
Version
v1.0.0
Status
Current
Download
Release

Non-Interactive Sign-In Analyzer

Non-Interactive sign in analyzer for M365
SHA-256:
_hash_value
Version
v0.9.0
Status
Preview
Download
Release

Unified Audit Log Analyzer

Audit log review and IOC-focused analysis workflow
SHA-256:
_hash_value
Version
v0.9.0
Status
Preview
Download
Release

Message Trace Analyzer

M365 Message trace analyzer tool.
SHA-256:
_hash_value
Version
v0.7.0
Status
In Development
Download
Package

Documentation Bundle

Quick-start PDF, release notes, and support documentation
Version
March 2026
Status
Included
View docs
RELEASE INFORMATION

What each release includes

  • Version number and release date
  • Supported environments and requirements
  • Package contents and included components
  • SHA-256 hash for integrity verification
  • Known limitations or considerations
DOWNLOAD GUIDANCE

Using downloaded packages

Download packages are provided as standalone files intended for local analysis. Verify file integrity using the provided SHA-256 hash prior to use, and refer to included documentation for setup and usage guidance.