Defensive Security
Incident Artifact Triage & Timeline
Convert a pasted log or artifact into indicators, a chronological timeline, and detection/response content in one pass.
Runs 10 tools against one pasted artifact - format/hash detection, metadata reference, IOC extraction, log normalization, a domain DGA check, a forensic timeline built from log-analyzer's own parsed entries, YARA/Sigma rule generation, and an IR playbook. The Hash Identification and DGA Detector steps only run when the IOC Extractor actually found a hash or domain in the artifact; Forensic Timeline only runs when Log Analyzer recognized a timestamped web-log format.
Tool chain
- Magic Detector
- IOC Extractor
- Hash Analyzer
- Metadata Extractor
- Log Analyzer
- DGA Detector
- Forensic Timeline Builder
- YARA Rule Generator
- Sigma Rule Generator
- IR Playbook Generator