READ-ONLY ROBLOX FORENSICS

Know what happened.Preserve the evidence.

Securo reconstructs Roblox activity from Windows and macOS artifacts. Model Sapphire turns uncertain evidence into an explainable forensic report.

Prefetch
Sysmon
Roblox logs
USN Journal
ShellBags
S
MODEL SAPPHIRECORRELATION ACTIVE
LIKELYExternal process access3 sources aligned · 14:22:08
8 SOURCES34 EVENTSREAD-ONLY
Securo / Interactive scanner demonstrationMODEL SAPPHIRE ONLINE
PIN CONNECTION
Create scan PIN
–
–
–
–
–
–
RECENT REPORTS
Updates appear as soon as Securo uploads.
01 / MODEL SAPPHIRE

More evidence. Clearer answers.

Sapphire brings execution history, registry context, file activity, accounts, and Roblox sessions into one explainable report. Every conclusion keeps its supporting artifacts and limits visible.

Prefetch
ShellBags
USN Journal
Roblox logs
SECURO
Model Sapphire
COLLECT · CORRELATE · EXPLAIN
Confirmed 02
Likely 05
Possible 11

Today's execution

Combines available launch evidence and labels unsigned applications for review.

Deletion context

Separates actual Recycle Bin entries from USN create, change, and delete traces.

Bypass signals

Shows log-clearing events, disabled tracking, and configured keyword or hash matches as reviewable evidence.

Readable reports

Searchable sections connect Roblox accounts, game sessions, findings, and raw artifacts without hiding uncertainty.

02 / LIVE INVESTIGATION

See the session. Then see what happened inside it.

The report connects an account, game, exact timestamp, and nearby evidence in one review surface instead of scattering clues across separate tables.

LIVE PRODUCT PREVIEW
REPORT / DESKTOP-V591VKL
RECONSTRUCTED TIMELINE

Thursday, August 6

LOCAL · CDT
03 / PRODUCT SYSTEM

The essential views, without the noise.

Sessions, confidence, external indicators, and platform coverage stay prominent; deeper evidence remains inside the report.

01 / ACTIVITY RECONSTRUCTION

Account, game, and time—connected.

Model Sapphire joins Roblox account identifiers, place IDs, log timestamps, and nearby findings into readable play sessions.

Evidence source availableYES
Timeline anchor matchedYES
Raw artifact preservedREVIEW
02 / CONFIDENCE

Evidence strength stays visible.

Confirmed, Likely, and Possible labels show how strongly the available artifacts support each conclusion.

Confirmed 02Likely 05Possible 11
03 / EXTERNALS

Process access without DLL injection.

Securo checks suspicious Roblox memory access, overlays, mapper traces, and driver-assisted externals while preserving the source evidence.

Evidence source availableYES
Timeline anchor matchedYES
Raw artifact preservedREVIEW
04 / PLATFORMS

One report language, two platforms.

Windows provides deep forensic artifacts while macOS clearly reports its permission-aware coverage and limits.

Evidence source availableYES
Timeline anchor matchedYES
Raw artifact preservedREVIEW
03 / WORKFLOW

From PIN to proof.

A consented scan moves through three explicit stages, with status visible at every step.

SECURO / WORKFLOW 01
Create the connection.

Create a short-lived PIN and share it only with the consenting scanner user.

04 / TRUST ARCHITECTURE

Built to inspect.
Not interfere.

No file deletion or remediation
No credentials, cookies, tokens, or messages
No persistence or stealth behavior
Raw evidence remains attached to findings
EVIDENCE COVERAGE / HONEST LIMITS
14
REPORT FIELDS
10
TILE GROUPS
2
PLATFORMS

Securo reports missing Sysmon, permission restrictions, unavailable collectors, and truncated scans. Absence of evidence is never silently marketed as evidence of absence.

Inspect coverage matrix
06 / FAQ

Straight answers before a scan.

The important questions are privacy, interpretation, platform coverage, and limitations—not marketing claims.

ANSWER / 01
READ-ONLY

Does Securo modify the checked computer?

No. Securo collects supported forensic artifacts and system context without deleting files, changing Roblox, or installing persistence.

SECURO / PRIVATE FORENSICS

Connect a scan.Turn artifacts into answers.

Open the private dashboard, generate a consent PIN, and review the evidence through Model Sapphire.