
threadOS: Forensic Artifacts
DFIR reference for examiners
0 ratings
Free
In-App Purchases
Rating summary
About
threadOS is a searchable reference manual for digital forensics examiners. It explains where forensic artifacts live, what format they use, how to parse them, and what evidentiary value they may carry.
Language: Reference articles are in English. The app interface supports English, German, French, Spanish and Brazilian Portuguese. Screenshots show the English interface.
Built for fast casework lookups:
• 1,032 artifact entries, 242 app profiles, and 172 concept articles.
• Search across artifacts, apps, and concepts.
• Copy paths with one tap and export clean citations for case reports.
• See the OS version each entry was documented against.
• Keep bookmarks, recents, and saved citation collections on device.
Access:
• Every Linux entry is included at no charge, so you can judge the reference before you buy.
• Complete Library is one nonconsumable in app purchase that unlocks iOS, iPadOS, macOS, Windows, and every other platform in the library. There is no subscription.
• If you first installed threadOS 1.1, your iOS and iPadOS entries stay free after Apple verifies your original acquisition. Customers who acquired threadOS before version 1.1.0 keep complete access.
Private by design:
• The entire corpus ships inside the app. Searches, views, bookmarks, and citations stay on device.
• No telemetry, analytics, accounts, advertising, or app backend.
• StoreKit contacts Apple only for product information, purchase, restore, and access verification. threadOS does not send purchase data to tumiOS.
• Reference content remains available offline after Apple verifies access.
threadOS is a reference manual, not a toolbox. It is published by tumiOS LLC.
Show more
+1
What's New in threadOS
1.2.1
October 28, 2026
Improved iPhone Duo layouts and updated forensic references.
1
Subscriptions & In-App Purchases
$9.99
Complete Library
Unlock every reference entry.





