introduced an open-source enterprise forensic investigation tool that provides remote access to memory and raw disk on multiple platforms. In continue, it described the architecture of the tool and how it performs enterprise forensic investigation regularly