A lean, local-first forensic log viewer for DFIR work. Parses log sources (AUL/.logarchive, EVTX, journald, and TOML-configurable text logs) into a normalized, taggable DuckDB timeline with a Splunk-inspired search syntax and a SQLite session layer for analyst tags. Rust + egui, no server, no cloud. Can run standalone or be handed evidence paths by crush.
Publisher’s description
What is Peach?
Peach is an open-source program for Windows from kalink0. It is written in Rust.
Installation and requirements
Official installers exist for 64-bit as Portable. It runs without installation (portable).
Updates and version history
The current version is 0.10.0, released on October 17, 2026. 3 versions are listed since August 14, 2026, each with links to its own installer files. The last update is less than a month old.
Popularity and file types
The source code on GitHub (kalink0/peach-forensics) has 12 stars.
Project description on GitHub: “A lean, local-first open-source DFIR log workbench. Parses Apple Unified Logs, Android Intrusion Logs, EVTX, journald, and configurable text formats into a normalized timeline with tagging, notes, and rules. Rust + egui, no server, no cloud.”
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- Portable: runs without installation
- Updated in the last two months
Cons
- No native ARM64 build
In short: Peach is an open-source Windows tool for 64-bit PCs.
Is Peach safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
D0617339B7299BC99AB754F27CB3947FD720B482B6C702B834ABDE47AD2AD60E· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Recent versions
All 3 versions ›| Version | Date | Size | Files |
|---|---|---|---|
| 0.10.0Latest | October 17, 2026 | — | 64-bit ZIP |
| 0.9.2 | October 6, 2026 | — | 64-bit ZIP |
| 0.1.0 | August 14, 2026 | — | 64-bit ZIP |
Install from the command line
Silent install ›winget install --id kalink0.Peach -eRelated guide: How to use winget: install and update apps
Information
- Publisher
- kalink0
- Licence
- Apache-2.0
- Price
- Free
- Source code
- github.com/kalink0/peach-forensics
- Written in
- Rust
- Requires
- Windows 11 / 10
- Architecture
- 64-bit
- Installer
- Portable
- Version
- 0.10.0
- Released
- October 17, 2026
- Added to the catalogue
- October 5, 2026
- Versions listed
- 3
- GitHub stars
- 12
- Website
- github.com
- winget ID
- kalink0.Peach
Ratings and reviews
No reviews yet. Be the first to rate it.
Frequently asked questions
Is Peach free?
Yes. Peach is open-source software under the Apache-2.0 licence.
Is Peach safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install Peach with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Does Peach run on ARM (Windows on Arm)?
There is no ARM64 build; Windows 11 on Arm can run the 64-bit version through emulation.
Where can I download an older version of Peach?
The versions page lists all 3 versions with links to their official installer files, back to August 14, 2026.
Can I use Peach without administrator rights?
Yes, it is portable: unpack and run it.
