AI Models
Overview
Section titled “Overview”Evidence: AI Models
Description: Inventory Ollama, Hugging Face, and signature-confirmed local model components
Category: AI
Platform: windows
Short Name: aimodel
Is Parsed: Yes
Sent to Investigation Hub: Yes
Collect File(s): No
Background
Section titled “Background”Local model runtimes such as Ollama and Hugging Face caches store model revisions and component files on disk. Presence of a model is not proof it was executed; inventory still shows which components were referenced locally.
Data Collected
Section titled “Data Collected”This collector gathers structured data about local model-component references, including model key, revision, component role, locator, capture mode, digest provenance, verification status, size, and timestamps where available.
Collection Method
Section titled “Collection Method”This collector parses bounded Ollama manifests, Hugging Face cache refs and snapshot metadata, and recognized model metadata inside signature-confirmed project roots. Large model-content files remain metadata-only.
Forensic Value
Section titled “Forensic Value”Shows which model revisions and components were referenced locally, preserving declared and physically computed digest provenance without treating a downloaded model as proof of execution.