redact

We have hosted the application redact in order to run this application in our online workstations with Wine or directly.

Quick description about redact:

REDACT 3.3.0 is an open-source Windows anti-forensics & artifact sanitization suite that permanently destroys 255 system artifacts � browser history, registry traces, NTFS change journals, Windows Recall AI snapshots, live RAM, and encrypted volume key material.

New in 3.3.0: Auto-Trigger Engine � USB Panic Trigger, Login Failure Trigger, and Dead Man's Switch fire a HIGH-tier wipe automatically without manual interaction.

BitLocker and VeraCrypt header destruction renders encrypted volumes permanently unrecoverable. EFS key wipe and Windows Hello NGC store included.

Zero-footprint: Transient Execution Splitting, NTFS File Cliff Masking, Registry LastWrite Spoofing.

4 wipe standards: 1-Pass Quick, NIST SP 800-88, 7-Pass DoD 5220.22-M, 35-Pass Gutmann.

10 browsers: Chrome, Edge, Firefox, Brave, Vivaldi, Arc, Zen, Pale Moon, Tor, Comet.

Companion: AAD-50 � firmware-level NVMe sanitization adopted into linux-nvme/nvme-cli in 14 days. Free. No telemetry.

Features:

• 255 sanitization targets � 60 low, 70 medium, 125 high-sensitivity items across registry hives, caches, browser data, and forensic artifact stores
• 4 wipe standards � 1-Pass Quick (SSD-optimised), NIST SP 800-88, 7-Pass DoD 5220.22-M, 35-Pass Gutmann.
• Transient Execution Splitting � clones to a randomised temporary name on launch, reducing visibility in Prefetch and BAM.
• NTFS File Cliff Masking � writes and immediately deletes dummy files after each wipe batch to obscure deletion spikes in NTFS metadata.
• Registry LastWrite Spoofing � rolls parent key timestamps forward before deletion to mask erasure events.
• 10-browser coverage � Chrome, Edge, Firefox, Brave, Vivaldi, Arc, Zen, Pale Moon, Tor, Comet. Cache, history, cookies, saved passwords.
• Windows Recall / CoreAI destruction � permanently deletes the AI screenshot store and semantic timeline SQLite database.
• Deep forensic artifact removal � AmCache, ShimCache, BAM, NTFS $UsnJrnl, $LogFile, Shell Bags, UserAssist, SRUM database, USB device history.
• USB device history erasure � removes all USBSTOR registry entries including serial numbers, vendor strings, and connection timestamps.
• Auto process handle termination � detects locked files and offers to terminate the blocking process to complete the wipe.
• Windows 11 Fluent Dark UI � per-item toggle switches across tier-grouped cards. Safe Selection preset in one click.
• Auto-UAC elevation � requests Administrator privileges on launch automatically.
• No external dependencies � pure Python standard library. No pip packages required to run.
• Live RAM Overwrite � allocates 85% of free physical RAM and fills with random bytes then zeros, defeating live acquisition tools like DumpIt and Magnet RAM Capture
• BitLocker header destruction � overwrites VMK headers on all drive volumes rendering encrypted data permanently unrecoverable. NIST 800-88 Cryptographic Erase compliant.
• VeraCrypt container nuke � overwrites primary and backup headers of all .vc/.hc files found on the system without mounting or decrypting
• EFS key material wipe � destroys RSA private keys and DPAPI master keys making all EFS-encrypted files permanently unreadable even with valid login credentials
• Windows Hello and NGC key store destruction � wipes PIN, fingerprint, and facial recognition key material and detaches Azure AD device binding
• Auto-Trigger Engine � USB Panic Trigger � auto-wipe fires instantly when a pre-armed USB drive is removed. No interaction required.
• Auto-Trigger Engine � Login Failure Trigger � monitors failed Windows login attempts and fires a full wipe after a user-defined threshold.
• Auto-Trigger Engine � Dead Man's Switch � countdown timer fires a HIGH-tier wipe at zero. All three triggers run simultaneously and independently.

Audience: Advanced End Users, Information Technology, Legal Industry, Security, Security Professionals, System Administrators.
User interface: Win32 (MS Windows).
Programming Language: Python.
Categories: