SkeleTrace

Works with

SkeleTrace is one of a set of tools from whispr.dev. The others are separate programs. Each has a free Community edition, ready to run on Windows, macOS and Linux.

SkeleTrace Community contains none of these tools, and needs none of them to run. Each section says what the tool does, how its files meet SkeleTrace’s, and where to download it. Every Community edition is free software from whispr.dev, under the GNU General Public License, version 3 only. For more about each, see whispr.dev.

OSINTropy: a case notebook

OSINTropy organises observations from public directories of people and organisations, from domain sources and from files you supply. It keeps the provenance of each one. You review same-name matches yourself, and record the reason for every link you confirm.

It works locally, in SQLite, and exports HTML, JSON, CSV and GraphML. Three rules shape it: a source hit is an observation, a search lead is unverified, and source diversity measures coverage, not truth.

With SkeleTrace. The SkeleTrace viewer opens OSINTropy’s case files and GraphML exports, with sources, observations and leads told apart. Weak points are marked in a case as in any other graph. In a case, a chokepoint can be the one reviewed link on which an identity rests.

Download OSINTropy Community

Every release lists each file’s SHA-256 in SHA256SUMS.txt. Release notes and the source code are on GitHub. The installers work as SkeleTrace’s do, and the download page explains them and the checksums.

New to OSINTropy? Its quickstart guide (PDF, 12 pages) covers installing, the demo case and a first search, in plain English.

Maxwell’s Demon Detector: stream structure

Maxwell’s Demon Detector turns packet metadata or byte streams into a scrolling landscape in the terminal. Its program is called mdd. Rhythm, bursts, changes in the mix of symbols and unexpected order become patterns you can inspect. It can watch live traffic or replay a capture. Live capture is in every download from version 0.4.0. On Windows it needs Npcap, which Wireshark also installs. On macOS and Linux it needs nothing extra. Replaying a capture needs no driver at all.

A structure flag is a prompt to investigate, not a verdict that traffic is malicious.

With SkeleTrace. Maxwell’s Demon Detector runs on its own. Its landscape reports describe traffic over time, not a graph or a map. The SkeleTrace viewer recognises them and says so rather than guessing.

Download Maxwell’s Demon Detector Community

SystemInstallerPlain archive
Windows 10 or 11, 64-bitmdd-windows-x86_64-setup.exemdd-windows-x86_64.zip
macOS 11 or newer, Apple silicon and Intelmdd-macos-universal.runmdd-macos-universal.tar.gz
Linux, 64-bit (x86_64)mdd-linux-x86_64.runmdd-linux-x86_64.tar.gz
Linux on Arm, 64-bit (ARM64)mdd-linux-aarch64.runmdd-linux-aarch64.tar.gz

Every release lists each file’s SHA-256 in SHA256SUMS.txt. Release notes and the source code are on GitHub. The installers work as SkeleTrace’s do, and the download page explains them and the checksums.

New to Maxwell’s Demon Detector? Its quickstart guide (PDF, 13 pages) covers installing, the built-in demo and watching live traffic, in plain English.

CrowdWatch: movement data

CrowdWatch brings public or supplied aggregate observations together, with their collection times, source health and provenance. It compares movement streams, detects unusual changes and gives conditional short-term projections in an offline report. Direct pedestrian counters measure movement; weather, news, events and bike stocks give context, but cannot show occupancy on their own.

With SkeleTrace. CrowdWatch exports a SkeleTrace profile, NDJSON sample records and GeoJSON. SkeleTrace reads the profile and takes in the samples through its file adapter, and its viewer opens the GeoJSON. CrowdWatch’s verify-skeletrace command runs SkeleTrace on an export and checks that every sample line is read. SkeleTrace 1.0 read all 15 records of CrowdWatch’s demonstration.

Download CrowdWatch Community

Every release lists each file’s SHA-256 in SHA256SUMS.txt. Release notes and the source code are on GitHub. The installers work as SkeleTrace’s do, and the download page explains them and the checksums.

New to CrowdWatch? Its quickstart guide (PDF, 11 pages) covers installing, the demo report and collecting real counts, in plain English.

How they fit together

In whispr.dev’s own summary, SkeleTrace supplies the shared graph and observation model. Maxwell’s Demon Detector adds stream analysis, OSINTropy a case notebook with reviewed links, and CrowdWatch aggregate movement observations. Each can be used alone: start with whichever answers the question in front of you.

SkeleTrace’s own tools are described on how it works, and its files on data formats.