Turbinia

Turbinia is an open-source framework designed for deploying, managing, and executing distributed forensic workloads effectively.

It automates the execution of common forensic processing tools to assist in handling evidence in the Cloud. This system enhances the ability to process large volumes of evidence and reduces response times by enabling parallel processing. Turbinia consists of various components for the client, server, and workers, which can operate in the Cloud, on local machines, or in a hybrid configuration that combines both.

The client sends requests to the server to process evidence. In response, the server creates logical jobs and schedules forensic processing tasks for the workers to execute. Whenever possible, evidence is divided among these jobs, allowing multiple tasks to be generated for parallel processing of the evidence. Workers operate continuously to handle these tasks, and any new evidence that is created or discovered during task execution is sent back to Turbinia for additional processing.