// artifact family
hr / workforce audit forensics
10 browser-only forensics tools in this catalog group — browse by artifact family when you know the kind of evidence you are working with, not the investigation pattern.
tools in this family
ordered as in the forensics catalog. every tool runs locally — no upload, no account.
- workday audit log forensic analyzerdrop workday audit export · parse worker + business process + initiating user · runs locally
- bamboohr employee change log forensic analyzerdrop bamboohr change log export · parse employee + field + changed by · runs locally
- adp workforce audit export forensic analyzerdrop adp workforce audit export · parse associate + event type + location · runs locally
- ukg pro workforce event forensic analyzerdrop ukg pro event export · parse employee + punch + schedule change · runs locally
- successfactors employee lifecycle forensic analyzerdrop successfactors lifecycle export · parse hire/transfer/terminate + approver · runs locally
- hr offboarding access lag correlatordrop hr termination + iam export · detect access after termination date · runs locally
- payroll direct deposit change detectordrop payroll change export · detect bank account routing changes · runs locally
- hr background check export forensic analyzerdrop background check vendor export · parse candidate + status + adverse action · runs locally
- phantom employee payroll fraud detectordrop payroll roster export · detect ghost employees + duplicate ids · runs locally
- cross hr identity provisioning correlatordrop hr + iga exports · correlate hire/term to account create/disable · runs locally