ForensicTriageNet: Synthetic Forensic Triage Dataset and Replication Package for TPM-Protected BitLocker Environments

This repository contains the synthetic dataset and replication package for the research paper "ForensicTriageNet: An Explainable AI Framework for Intelligent Forensic Acquisition Strategy Selection in TPM-Protected BitLocker Environments". Content of this upload:1. forensic_scenarios_v1.csv: A synthetic dataset containing 2,500 expert-rule-derived forensic scenarios across 13 device-level configuration features (such as Windows version, TPM type, secure boot status, and RAM form factor) mapped to six candidate forensic acquisition strategies.2. source_code.zip: The complete implementation code for the ForensicTriageNet prototype, including the LightGBM point predictor, the SHAP explainability engine, the split conformal prediction engine, and automated host interrogation scripts.3. README.md: Operational guidelines on environment setup and execution steps to reproduce the evaluation metrics reported in the manuscript.