Everything you need to download, install, and launch ForensicToolkit in under 2 minutes.
Download the official Windows installer from GitHub Releases. It bundles the application, Qt6 runtime, and OpenSSL — no separate installs needed.
When you run the installer, Windows SmartScreen will show a blue warning screen — "Windows protected your PC". This is normal for any open-source app that doesn't have an expensive code-signing certificate.
Follow these steps to proceed:
You see the blue screen: "Windows protected your PC" with only a "Don't run" button.
Click "More info" — the small link text below the warning message.
A new "Run anyway" button appears at the bottom right.
Click "Run anyway". The installer will launch normally.
The installer uses a standard Windows setup wizard. Follow these steps:
C:\Program Files\ForensicToolkit. Click Next.After installation, launch ForensicToolkit from the desktop shortcut or Start Menu. On first launch:
%APPDATA%\ForensicToolkit for storing cases.%APPDATA%\ForensicToolkit\logs.The AI Assistant module can connect to cloud LLMs or a local Ollama instance. Go to Settings → AI Assistant and enter your credentials:
http://localhost:11434. No API key required. Fully offline.ollama pull llama3. Then set the endpoint in Settings.
App won't start after install
Make sure you're on Windows 10 64-bit (1909+) or Windows 11. The installer only supports x64 systems.
Missing DLL errors
Re-run the installer — it bundles all required DLLs including the Visual C++ runtime. If it persists, install the Visual C++ Redistributable 2022 x64.
Antivirus quarantines the file
Add an exclusion for the ForensicToolkit install directory in your antivirus settings. The unsigned binary may trigger heuristic detections — this is a false positive.
Still having issues?
%APPDATA%\ForensicToolkit\logs.
Windows 10/11 · 64-bit · Free forever · MIT License