REDACT

Features

• 285 sanitization targets — 88 low, 49 medium, 148 high-sensitivity items across registry hives, caches, browser data, and forensic artifact stores
• 8 wipe standards — 1-Pass Quick (SSD-optimised), NIST SP 800-88, HMG IS5, AFSSI-5020, NAVSO P-5239-26, VSITR, 7-Pass DoD 5220.22-M, 35-Pass Gutmann
• Transient Execution Splitting — clones to a randomised temporary name on launch, reducing visibility in Prefetch and BAM
• NTFS File Cliff Masking — writes and immediately deletes dummy files after each wipe batch to obscure deletion spikes in NTFS metadata
• Registry LastWrite Spoofing — rolls parent key timestamps forward before deletion to mask erasure events
• 13-browser coverage — Chrome, Edge, Firefox, Brave, Vivaldi, Arc, Zen, Pale Moon, Tor, Comet, Opera, Waterfox, Internet Explorer. Cache, history, cookies, saved passwords, autofill, and session restore files
• Windows Recall / CoreAI destruction — permanently deletes the AI screenshot store and semantic timeline SQLite database
• Deep forensic artifact removal — AmCache, ShimCache, BAM, NTFS $UsnJrnl, $LogFile, Shell Bags, UserAssist, SRUM database, USB device history
• USB device history erasure — removes all USBSTOR registry entries including serial numbers, vendor strings, and connection timestamps
• Auto process handle termination — detects locked files and offers to terminate the blocking process to complete the wipe
• Windows 11 Fluent Dark UI — per-item toggle switches across tier-grouped cards. Safe Selection preset in one click
• Auto-UAC elevation — requests Administrator privileges on launch automatically
• Minimal dependencies — pystray and Pillow required for system tray icon. No other pip packages required
• Live RAM Overwrite — allocates 85% of free physical RAM and fills with random bytes then zeros, defeating live acquisition tools like DumpIt and Magnet RAM Capture
• BitLocker header destruction — overwrites VMK headers on all drive volumes rendering encrypted data permanently unrecoverable. NIST 800-88 Cryptographic Erase compliant
• VeraCrypt container nuke — overwrites primary and backup headers of all .vc/.hc files found on the system without mounting or decrypting
• EFS key material wipe — destroys RSA private keys and DPAPI master keys making all EFS-encrypted files permanently unreadable even with valid login credentials
• Windows Hello and NGC key store destruction — wipes PIN, fingerprint, and facial recognition key material and detaches Azure AD device binding
• Non-blocking dispatch engine — zero GUI thread stalls. Wipe pipeline runs at full CPU speed via scheduled after() updates, eliminating the per-item blocking overhead of 3.3.0
• Silent subprocess execution — all system calls run with CREATE_NO_WINDOW. No console windows flash during pipeline execution
• CLI mode — full headless operation via --tier low/medium/high/all and --mode single/nist/secure/gutmann flags. Scriptable, schedulable, no GUI required
• Audit engine — in-memory per-item execution log compiled at runtime. Zero bytes written to disk. Pipeline trace exists only in volatile RAM
• Auto-Trigger Engine — USB Panic Trigger — auto-wipe fires instantly when a pre-armed USB drive is removed. No interaction required
• Auto-Trigger Engine — Login Failure Trigger — monitors failed Windows login attempts via Event ID 4625 and fires a full wipe after a user-defined threshold
• Auto-Trigger Engine — Dead Man's Switch — countdown timer fires a HIGH-tier wipe at zero
• Auto-Trigger Engine — VPN Disconnect Trigger — monitors active network interfaces and fires immediately when the VPN connection drops unexpectedly
• Auto-Trigger Engine — WiFi Change Trigger — arms on known SSIDs and fires when the device connects to an unrecognised network
• Auto-Trigger Engine — Time Window Trigger — defines an allowed operating window. Any access outside that window fires an automatic HIGH-tier wipe
• Auto-Trigger Engine — Forensic Tool Detection Trigger — monitors running processes for FTK Imager, Autopsy, EnCase, Volatility, and related acquisition tools. Fires before imaging can complete. All 7 triggers run simultaneously and independently

Follow REDACT

REDACT Web Site