All Tools

All tools run entirely in your browser. No data is sent to any server.

IOC Extractor

Extract IPs, domains, URLs, hashes, CVEs and more from raw text, logs or reports.

IOCregexforensics
Open Tool

Timestamp Converter

Convert Unix epoch, Windows FILETIME, WebKit, ISO 8601 and EXIF timestamps.

timestampsFILETIMEepoch
Open Tool

Hash Calculator

Calculate MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes for text or files.

hashSHA-256integrity
Open Tool

Email Header Analyzer

Analyze raw email headers, inspect SPF/DKIM/DMARC and trace received hops.

emailphishingSPFDKIM
Open Tool

Metadata Extractor

Inspect EXIF, PDF and document metadata locally in your browser.

EXIFPDFmetadataforensics
Open Tool

Log Timeline Builder

Turn raw logs into an ordered timeline for rapid triage and investigation.

logstimelineincident response
Open Tool

Base64/XOR Decoder

Decode suspicious strings, scripts and obfuscated payloads locally in your browser.

malwaredeobfuscationbase64xor
Open Tool

EVTX Parser Lite

Inspect Windows Event Logs locally for fast incident response triage.

evtxwindowsevent logstriage
Open Tool

PE Static Analyzer Lite

Analyze EXE and DLL structure, sections and imports without leaving the browser.

peexedllstatic analysis
Open Tool

Prefetch Analyzer Lite

Inspect Windows Prefetch files locally for execution details, run counts and referenced paths.

prefetchwindowsexecution artifacttriage
Open Tool

YARA Rule Tester Lite

Test YARA rules locally against text or files, with no upload required.

yaramalwarerule testingtriage
Open Tool

SQLite Artifact Explorer Lite

Open SQLite databases locally and inspect browser/app artifacts, schema and records.

sqlitebrowser historyapp databasetriage
Open Tool

Mobile SQLite Explorer Lite

Inspect mobile app SQLite databases and inspect app artifacts locally.

sqlitemobileapp databasetriage
Open Tool

Plist & Protobuf Decoder Lite

Open binary/XML plists and small protobuf blobs for quick inspection in the browser.

plistprotobufmobilemetadata
Open Tool

iOS Backup Explorer Lite

Inspect iOS backup manifests and lightweight metadata locally without uploads.

iosbackupmanifestmobile
Open Tool

Web Server Log Analyzer

Parse access logs (Apache/Nginx) locally and detect suspicious requests (SQLi, XSS, traversal).

logsnginxapachetriage
Open Tool

Registry Hive Explorer Lite

Inspect Windows registry hives for common forensic artefacts such as Autoruns and USB history.

registryhiveautorunsforensics
Open Tool

PCAP Triage Lite

Inspect PCAP files locally to extract HTTP, DNS and TLS indicators for quick network triage.

pcapnetworkdnshttp
Open Tool