V0.7.0

[Ghassan-elsman]

Full Changelog: 0.6.2...V0.7.0
Add Correlation Engine with comprehensive documentation
Major Features:

• Introduce dual-engine correlation system (Time-Based and Identity-Based)
• Add universal data import supporting CSV/JSON/SQLite from any forensic tool
• Implement Feather normalization system for standardized artifact storage
• Add Wings correlation rules system with configurable parameters
• Implement Pipeline orchestration for automated workflows
• Add cyberpunk-styled GUI for correlation visualization

Correlation Engine Components:

• Time-Based Engine: O(N²) comprehensive field-level correlation
• Identity-Based Engine: O(N log N) scalable identity tracking with streaming
• Feather Builder: Universal forensic data normalization
• Wings System: Flexible correlation rule definitions
• Pipeline Executor: Automated multi-artifact correlation workflows
• Results Viewer: Interactive visualization

Documentation (~7,200 lines):

• Add Correlation Engine Overview with architecture diagrams
• Add comprehensive Engine Documentation with selection guide
• Add Architecture Documentation with component integration
• Add Feather, Wings, and Pipeline documentation
• Add dedicated Correlation Engine Contributing Guide
• Update main README with Correlation Engine section
• Update main CONTRIBUTING.md highlighting Correlation Engine priority

Performance:

• Identity-Based Engine: Process 100K records in 2.5 min with streaming
• Time-Based Engine: Optimized for datasets < 1,000 records
• Constant memory usage with streaming mode for large datasets

---

This discussion was created from the release V0.7.0.

[stark4n6]

Is there an executable for this version?

[Ghassan-elsman]

There’s no executable for v0.7.0 yet. This release focuses on the correlation engine internals.

We’re still working on the time-based engine, scoring system, and semantic mapping. Once those are stable and usable, we’ll ship an executable.

The first EXE release is planned for v0.7.1 or v0.7.2.