// artifact family
identity governance / iga forensics
10 browser-only forensics tools in this catalog group — browse by artifact family when you know the kind of evidence you are working with, not the investigation pattern.
tools in this family
ordered as in the forensics catalog. every tool runs locally — no upload, no account.
- sailpoint identityiq certification export forensic analyzerdrop sailpoint certification campaign export · parse reviewer + entitlement + decision · runs locally
- saviynt access governance audit forensic analyzerdrop saviynt audit log export · parse role + sod + remediation task · runs locally
- okta lifecycle provisioning log forensic analyzerdrop okta lifecycle provisioning export · parse app assignment + deprovision + group push · runs locally
- microsoft entra governance access review forensic analyzerdrop entra access review export · parse reviewer + resource + decision timeline · runs locally
- ping identity access management audit forensic analyzerdrop ping audit log export · parse adapter + mapping + sync result · runs locally
- onelogin user provisioning event forensic analyzerdrop onelogin provisioning event export · parse app + role + mapping action · runs locally
- iga role mining anomaly detectordrop iga entitlement export · detect over-provisioned role clusters · runs locally
- orphaned account detector from iga exportdrop iga account inventory export · detect stale/orphan accounts · runs locally
- segregation of duties violation forensic analyzerdrop sod policy export · parse conflicting entitlements + owners · runs locally
- cross iga account lifecycle correlatordrop 2+ iga exports · correlate account lifecycle across systems · runs locally