Skip to content
Open-Source Registry

cargo / sootmark-collector

sootmark-collector 0.8.2

processes
181
operations
18K
packages
100
compiler runs
90
connections
1
job time
48s
capture
229 KB
records
33K
bytes / record
6.9

A forensic triage collector for Windows: reads NTFS raw (locked files, $MFT, $UsnJrnl, hives with their logs) and streams what a signed job names into one zip with a hashed manifest, encrypted to the case. Open source, so what runs on your hosts can be read.

clean

Build behaviourcompiled and nothing more

223 downloads · Apache-2.0 OR MIT · source · home page · cargo

dfir forensics incident-response ntfs triage

Release 0.8.2 run 7bad8e7e-bb00-4b84-aac9-6d7b88fbc950 · built 2026-10-08

Artifact

binary · retained · product
2
ChecksDetections
Build behavior
✓ Network activity—
✓ Sensitive data access and transfer—
✓ Cross-process access—
✓ Build file changes—
✓ Build script activity—
✓ Data flow analysis—
✓ Filesystem writes—
✓ Context collection—
Supply chain
✓ Known vulnerabilities—
✓ Build-time dependency advisories—
✓ Dependency advisories—
✓ Declared and observed dependencies—
✓ Dependency and toolchain versions—
Pipeline
✓ Pipeline coverage—

Detections

0

No detections

No abnormal activity detected across 18K flows.

Network

0 peers
    cargo fetched 5,115 files from static.crates.io

    Raw data

    capture
    229 KB
    records
    32,935
    bytes per record
    6.9

    Loading a sample of the capture

    Want to see more? E-mail us at hello@bitbison.io about your use case.

    Dependencies

    116 packages, 11 with a build script that ran, 1 doing more than compiling
    PackageVersionUsageBuild behaviour
    wit-bindgen0.57.1unrelatedbuild script, not runprebuilt objects
    curve25519-dalek4.1.3linkedbuild script
    curve25519-dalek5.0.0linkedbuild script
    curve25519-dalek-derive0.1.1linkedproc macro
    generic-array0.14.7linkedbuild script
    getrandom0.3.4unrelatedbuild script
    getrandom0.4.3linkedbuild script
    ld-linux-x86-64.so.2linkedsystem library
    libc0.2.190linkedbuild script
    libc.so.6linkedsystem library
    libgcc_s.so.1linkedsystem library
    libm.so.6linkedsystem library
    libmvec.so.1linkedsystem library
    num-traits0.2.19unrelatedbuild script
    proc-macro21.0.107linkedbuild script
    quote1.0.47linkedbuild script
    rustix1.1.5unrelatedbuild script
    rustversion1.0.23buildtime_onlybuild script, not runproc macro
    serde1.0.229feature_gatedbuild script, not run
    serde_core1.0.229feature_gatedbuild script, not run
    serde_derive1.0.229buildtime_onlyproc macro
    wasm-bindgen0.2.129platform_gatedbuild script, not run
    wasm-bindgen-macro0.2.129buildtime_onlyproc macro
    wasm-bindgen-shared0.2.129platform_gatedbuild script, not run
    zerocopy0.8.59unrelatedbuild script
    zerocopy-derive0.8.59unrelatedproc macro
    aead0.6.1linked
    aes0.8.4linked
    autocfg1.5.1unrelated
    base64ct1.8.3feature_gated
    bit-set0.8.0unrelated
    bit-vec0.8.0unrelated
    bitflags2.13.2unrelated
    block-buffer0.10.4linked
    block-buffer0.12.1linked
    bumpalo3.20.3buildtime_only
    cfg-if1.0.5linked
    chacha200.10.2linked
    chacha20poly13050.11.0linked
    cipher0.4.4linked
    cipher0.5.2linked
    cmov0.5.4linked
    const-oid0.9.6feature_gated
    cpufeatures0.2.17linked
    cpufeatures0.3.1linked
    crypto-common0.1.7linked
    crypto-common0.2.2linked
    ctr0.9.2linked
    ctutils0.4.2linked
    der0.7.10feature_gated
    digest0.10.7linked
    digest0.11.3linked
    ed255192.2.3linked
    ed25519-dalek direct2.2.0linked
    errno0.3.14unrelated
    fastrand2.5.0unrelated
    fnv1.0.7unrelated
    getrandom0.2.17feature_gated
    hkdf0.13.0linked
    hmac0.12.1linked
    hmac0.13.0linked
    hybrid-array0.4.15linked
    inout0.1.4linked
    inout0.2.2linked
    js-sys0.3.106platform_gated
    linux-raw-sys0.12.1unrelated
    pbkdf20.12.2linked
    pkcs80.10.2feature_gated
    poly13050.9.1linked
    ppv-lite860.2.21unrelated
    proptest1.11.0unrelated
    quick-error1.2.3unrelated
    r-efi5.3.0unrelated
    rand0.9.5unrelated
    rand_chacha0.9.0unrelated
    rand_core0.10.1linked
    rand_core0.6.4feature_gated
    rand_core0.9.5unrelated
    rand_xorshift0.4.0unrelated
    regex-syntax0.8.11unrelated
    rustc_version0.4.1buildtime_only
    rusty-fork0.3.1unrelated
    semver1.0.28buildtime_only
    sha10.10.7linked
    sha20.10.9linked
    sha20.11.0linked
    signature2.2.0linked
    sootmark-age direct0.1.0linked
    sootmark-common direct0.3.6linked
    sootmark-disk direct0.3.3linked
    sootmark-prefetch direct0.1.1linked
    sootmark-registry direct0.7.0linked
    sootmark-shell0.2.2linked
    sootmark-zip direct0.4.0linked
    spki0.7.3feature_gated
    subtle2.6.1linked
    syn2.0.119linked
    syn3.0.6buildtime_only
    tempfile3.27.0unrelated
    typenum1.20.1linked
    unarray0.1.4unrelated
    unicode-ident1.0.26linked
    universal-hash0.6.1linked
    version_check0.9.5buildtime_only
    wait-timeout0.2.1unrelated
    wasi0.11.1+wasi-snapshot-preview1feature_gated
    wasip21.0.4+wasi-0.2.12unrelated
    wasm-bindgen-macro-support0.2.129buildtime_only
    windows-link0.2.1platform_gated
    windows-sys direct0.61.2platform_gated
    x25519-dalek3.0.0linked
    zeroize1.9.0linked
    fiat-crypto0.2.9unverified
    fiat-crypto0.3.0unverified
    once_cell1.21.4dead
    r-efi6.0.0unverified

    1 of 1 jobs captured: build-test success · Generated 2026-10-08 · tarp 0.1.0+20261008175400-gc0b8b6ba8883 · run 7bad8e7e-bb00-4b84-aac9-6d7b88fbc950