chainsaw
Rapidly search and hunt through Windows forensic artefacts
uncategorizedRed Team
TooluncategorizedredLinuxKali LinuxPlatforms: Linux · Last verified September 6, 2026
Chainsaw provides a powerful ‘first-response’ capability to quickly identify threats within Windows forensic artefacts such as Event Logs and the MFT files.
Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.
Getting started
See the official Kali tool page and upstream homepage linked above for installation and usage details.
