@iota-big3/sdk-security/dist/forensics/forensics-manager.d.ts

Advanced security features including zero trust, quantum-safe crypto, and ML threat detection

/**
 * Forensics Manager
 * Central orchestrator for digital forensics capabilities
 */
import { EventEmitter } from 'events';
import { AnalysisResult, CaseStatus, ForensicCase, ForensicEvidence, ForensicReport, ForensicToolConfig, Investigator, ReportType, TimelineEntry } from './types';
interface ForensicsManagerConfig extends ForensicToolConfig {
    casesPath?: string;
    maxConcurrentAnalysis?: number;
}
export declare class ForensicsManager extends EventEmitter {
    private config;
    private cases;
    private evidence;
    private analyzers;
    private activeAnalysis;
    private writeBlockers;
    private isInitialized;
    constructor(config?: ForensicsManagerConfig);
    /**
     * Initialize forensics manager
     */
    initialize(): Promise<void>;
    /**
     * Create a new forensic case
     */
    createCase(caseData: Partial<ForensicCase>): Promise<ForensicCase>;
    /**
     * Add evidence to a case
     */
    addEvidence(caseId: string, evidenceData: Partial<ForensicEvidence>): Promise<ForensicEvidence>;
    /**
     * Analyze evidence
     */
    analyzeEvidence(evidenceId: string): Promise<AnalysisResult>;
    /**
     * Generate forensic report
     */
    generateReport(caseId: string, type?: ReportType): Promise<ForensicReport>;
    /**
     * Export report in various formats
     */
    exportReport(reportId: string, format: 'PDF' | 'DOCX' | 'HTML' | 'JSON'): Promise<Buffer>;
    /**
     * Update case status
     */
    updateCaseStatus(caseId: string, status: CaseStatus): Promise<void>;
    /**
     * Add investigator to case
     */
    addInvestigator(caseId: string, investigator: Omit<Investigator, 'assignedAt' | 'assignedBy'>): Promise<void>;
    /**
     * Enable write blocker for device
     */
    enableWriteBlocker(device: string): Promise<void>;
    /**
     * Search across all cases
     */
    searchCases(query: string): Promise<ForensicCase[]>;
    /**
     * Get case timeline
     */
    getTimeline(caseId: string): TimelineEntry[];
    /**
     * Verify evidence integrity
     */
    verifyEvidence(evidenceId: string): Promise<boolean>;
    /**
     * Private helper methods
     */
    private createStorageDirectories;
    private initializeAnalyzers;
    private loadExistingCases;
    private saveCase;
    private storeEvidence;
    private calculateHashes;
    private updateCustodyChain;
    private runAnalysis;
    private consolidateTimeline;
    private generateSummary;
    private generateMethodology;
    private generateConclusions;
    private generateRecommendations;
    private getReportTitle;
    private createWriteBlocker;
    private sendToSIEM;
    private exportToHTML;
    private formatBytes;
    private reviver;
}
export {};
//# sourceMappingURL=forensics-manager.d.ts.map