Wallet Sleuth is a triage tool that aims to quickly identify user cryptocurrency addresses and transactions from a variety of wallet applications!
Wallet Sleuth requires three main inputs: Appdata, Output and Wallet Selection.
Appdata - The AppData directory of the user.
Output - The Output directory for CSV files containing identified addresses and log files.
Wallet Selection - Wallet applications to search for cryptocurrency addresses through.
After running, an information box will notify you when the search is complete. Any identified cryptocurrency addresses are displayed in the output window and a log file details actions and errors in the search.
Connected Hardware Wallet Detector - Check for previously connected Hardware Wallets such as Trezor or Ledger, amoung others.
Wallet Detector - Determine what wallets to scan for addresses on by identifying currently installed wallets.
- Atomic Wallet
- Bitcoin Core
- Bitget (Brave, Chrome) (Formerly Bitkeep)
- Brave Browser Wallet
- Coinbase Wallet (Brave, Chrome)
- Crypto.com Wallet (Chrome)
- Dogecoin Core
- Exodus Wallet
- Guarda (Chrome, Opera)
- Ledger Live
- Litecoin Core
- MetaMask (Brave, Chrome, Edge)
- Opera Browser Wallet
- Phantom (Brave, Chrome)
- Trezor Suite
- Wasabi Wallet
- Support for Windows OS only.
- Requires Python 3.8 or higher
- To parse Transaction IDs from the Exodus cache, the brotli extension is required.
REMEMBER TO CONFIRM YOUR OWN FINDINGS!