⭐ Introducing OpenRelik

[berggren]

🚀 Launch of OpenRelik!

OpenRelik is an open-source (Apache-2.0) platform designed to streamline collaborative digital forensic investigations. It combines modular workflows for custom investigative processes, an intuitive interface for efficient workflow management, real-time collaboration features, and a centralized repository for shared artifacts. The platformt is easy to extend with new workers to adapt to evolving forensic needs.

https://openrelik.org

[Zawadidone]

I want to emphasise that I’m a big fan of the open-source software, like Timesketch, that you and Google have developed. Note that I haven't used OpenRelik and that my questions is based on the documentation of the project.

Scalability: The system is designed to scale efficiently, accommodating growing volumes of forensic data and user activity. data. - https://openrelik.org/docs/key-concepts/#additional-considerations

Which audience can use this platform for digital forensic investigations? Is it for people that want to learn how forensic workflows work or is it for incident responders that want to perform "enterprise" investigations in a scalable manner?

I'm asking this question based on my experience building an incident response lab using only open-source tools (https://www.huntandhackett.com/blog/incident-response-data-acquisition). I found that many forensic tools, including Timesketch, often struggle with scalability for larger investigations.

[berggren]

Hey Zawadi, welcome to the OpenRelik project, and thanks for all your contributions to Timesketch!

Good question. The scaling aspects of OpenRelik comes from the fact that the workers are independently run and deployed. This means that you can scale them out horizontally. Either running more concurrent executions on the same host, or spin up more hosts to share the load. Managing this with runtimes such as k8s is possible.

[Zagreb-cmd]

Hi! Thank you for your work! Especially for the development and support of Timesketch!
What is the difference between OpenRelik and Tubinia? Why did you decide to create a new project rather than add new features to Tubinia?