// artifact family
saas audit logs
31 browser-only forensics tools in this catalog group — browse by artifact family when you know the kind of evidence you are working with, not the investigation pattern.
tools in this family
ordered as in the forensics catalog. every tool runs locally — no upload, no account.
- amplitude event export forensic analyzerdrop amplitude event export · parse user events + properties · flag account takeover property tampering bulk delete exports geo anomalies · runs locally
- asana audit log forensic analyzerdrop asana audit log api export · parse task + permission events · flag admin grants sharing changes bulk deletes token activity · timeline + csv/json export · runs locally
- atlassian bitbucket audit log forensic analyzerdrop bitbucket audit log · parse repo / push / permission events
- atlassian confluence audit log forensic analyzerdrop confluence audit log · parse page edits + permission changes
- atlassian jira audit log forensic analyzerdrop jira audit log csv · parse issue create / transition / permission changes
- calendly event log forensic analyzerdrop calendly event/api log · parse bookings + reschedules + cancellations · flag admin oauth webhook changes booking spam after-hours scheduling · runs locally
- clickup audit log forensic analyzerdrop clickup audit log · parse workspace events · flag admin role changes space sharing webhooks bulk deletes · timeline + csv/json export · runs locally
- freshdesk audit log forensic analyzerdrop freshdesk audit log · parse agent + ticket events
- hubspot audit log forensic analyzerdrop hubspot audit log export · parse contact + deal + workflow events
- intercom conversation export forensic analyzerdrop intercom conversation export · parse messaging + tagged events
- linear audit log forensic analyzerdrop linear admin audit export · parse issue + workflow + user events · flag admin grants workflow edits bulk archive api keys · timeline + csv/json export · runs locally
- mailchimp sending log forensic analyzerdrop mailchimp campaign + activity export · parse send + open + click + unsub events
- mixpanel event export forensic analyzerdrop mixpanel event export · parse user actions + properties
- monday audit log forensic analyzerdrop monday.com audit log · parse board + user events · flag permission changes guest access automation edits bulk deletes · timeline + csv/json export · runs locally
- netsuite audit trail forensic analyzerdrop netsuite audit trail csv · parse field + record changes · flag role permission vendor bank journal script events · timeline + csv/json export · runs locally
- notion audit log forensic analyzerdrop notion workspace audit export · parse page + member events · flag guest invites page exports permission downgrades bulk deletes · timeline + csv/json export · runs locally
- pagerduty incident log forensic analyzerdrop pagerduty incident export · parse incident lifecycle + acks + responders
- quickbooks audit log forensic analyzerdrop quickbooks online audit log · parse transaction + change-log entries
- salesforce event monitoring forensic analyzerdrop salesforce event monitoring api logs · parse api login report events · flag token abuse report exports login anomalies bulk api spikes · timeline + csv/json export · runs locally
- salesforce setup audit trail forensic analyzerdrop salesforce setupauditTrail.csv · parse config changes + actor · flag permission profile mfa connected app changes · timeline + csv/json export · runs locally
- segment debugger event export forensic analyzerdrop segment debugger event log · parse identify / track events
- sendgrid event webhook forensic analyzerdrop sendgrid event webhook log · parse delivery + bounce + open events
- servicenow audit log forensic analyzerdrop servicenow sys_audit export · parse field changes + actor + table · flag acl changes admin grants incident mass updates · timeline + csv/json export · runs locally
- shopify audit log forensic analyzerdrop shopify admin audit log · parse staff actions + order / inventory changes
- squarespace audit log forensic analyzerdrop squarespace admin audit · parse site admin events
- stripe events export forensic analyzerdrop stripe events.json · parse charge / refund / dispute timeline
- twilio message log forensic analyzerdrop twilio sms / voice log export · parse messages + call records
- vonage message log forensic analyzerdrop vonage nexmo message log · parse sms delivery events
- wix admin activity forensic analyzerdrop wix admin activity log · parse site admin events · flag role grants app installs member bulk deletes payment changes · timeline + csv/json export · runs locally
- xero history and notes forensic analyzerdrop xero history-and-notes export · parse transaction edits + actor
- zendesk audit log forensic analyzerdrop zendesk audit log api export · parse ticket + agent activity