Description
Provides a forensic comparison tool for mounted Arch Linux installations. It reads installed package data and compares filesystem contents against trusted package sources to find unexpected changes.
Use it for incident response, integrity checks, or recovery investigations on systems you are authorized to examine. Results may include sensitive file paths and system details.