A Cyber Forensic Triage and Docker-based Sandbox Verification System that rapidly detects suspicious files using extension checks, keyword analysis, metadata extraction, and SHA-256 hashing. It securely scans potentially malicious files inside an isolated container to prevent host infection and ensure safe digital evidence analysis.

his case study investigates a covert beaconing pattern in which a compromised host periodically sent outbound DNS queries to Google's public resolver (8.8.8.8) at 30-minute intervals without receiving responses.