Defensive Security
Event Normalization Investigation
Normalize a pasted log or artifact into indicators, structured log entries, and - when possible - a forensic timeline.
A smaller, log-focused sibling of Incident Artifact Triage & Timeline above: format detection, IOC extraction, and log normalization always run; Forensic Timeline consumes log-analyzer's own normalized entries rather than re-reading the raw artifact, so the timeline reflects only what the log parser actually recognized. The reference workflow's base64/URL-decode/timestamp-normalization steps are not included - those tools are registered clientOnly in this app and have no server query a workflow step can call.
Tool chain
- Magic Detector
- IOC Extractor
- Log Analyzer
- Forensic Timeline Builder