Local-first forensic log viewer for DFIR work
A lean, local-first forensic log viewer for DFIR work. Parses log sources (AUL/.logarchive, EVTX, journald, and TOML-configurable text logs) into a normalized, taggable DuckDB timeline with a Splunk-inspired search syntax and a SQLite session layer for analyst tags. Rust + egui, no server, no cloud. Can run standalone or be handed evidence paths by crush.
| Publisher | kalink0 |
|---|---|
| Version | 0.10.0 |
| Release date | 2026-10-17 |
| License | Apache-2.0 |
| Installer type | zip |
| Architecture | x64 |
| Package ID | kalink0.Peach |
| Dependencies | Microsoft.VCRedist.2015+.x64 |
winget install --id=kalink0.Peach -ewinget upgrade --id=kalink0.Peach -ewinget uninstall --id=kalink0.Peach -eYes. Peach is free and open-source software released under the Apache-2.0 license.
The latest version is 0.10.0, released on Oct 17, 2026.
The download button links to the official installer published on github.com, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with d0617339b7299bc99ab754f27cb3947fd720b482b6c702b834abde47ad2ad60e.
Peach runs on Windows and is available for 64-bit (x64) systems.
Open Settings › Apps › Installed apps, find Peach and select Uninstall. From the command line, run winget uninstall --id=kalink0.Peach -e.
Yes. Peach is available as a portable ZIP archive (peach-windows-v0.10.0.zip, 64-bit (x64)) that runs without installation. Copy it to any folder or USB drive and run it from there.
Other System Utilities programs for Windows from different developers.
Forensic disk analyzer — decode images & live devices, map partitions, flag anomalies
Hindsight: A Narrative Exploration Game
Forensic timestamp decipherment - scored, cited, ambiguity-first
A free forensic utility for converting data found on desktop and mobile devices into human-readable timestamps.
Make effective Gantt charts in half the time.
Cross Platform Tizen Log Viewer - T.Viewer