https://github.com/securityronin/dar-forensic

Pure-Rust forensic reader + anomaly auditor for Denis Corbin DAR (Disk ARchiver) archives, incl. Passware Kit Mobile / Cellebrite mobile extractions; formats 1-11, transparent gzip/bzip2/xz/zstd/lz4/lzo, multi-volume, hardened and fuzz-tested. dar-core reader + dar-forensic analyzer.

archive backup compression dar dfir disk-archiver forensics incident-response mobile-forensics parser passware rust

Last synced: 21 Jun 2026