fatcousin
// industry vertical

cross-tool correlation / FatCousin export merge

merge CSV/JSON exports from other FatCousin tools — EDR findings overlap · super-timeline · IOC hash intersection · SaaS audit actor linking · browser/mobile/wallet export correlation. meta-layer on top of tool output, not raw evidence.

tools
10
priority
H
processing
local · in browser

start here · primary tools

ordered. work top-down. the first tool is the suggested entry point for this vertical.

  1. fatcousin multi tool super timeline correlatordrop any fatcousin findings csv/json · unified timestamp-sorted timeline · runs locally
  2. fatcousin cross export ioc hash correlatordrop hash/ioc csv from any fatcousin tool · shared indicator intersection report · runs locally
  3. fatcousin edr findings export correlatordrop 2+ edr/mdr findings csv exports · join on hostname + process + severity · runs locally
  4. case report generatorfill in case number · examiner · dates · findings · drop evidence files for auto hash · generates structured forensic report PDF · runs locally

also useful · secondary tools

cross-cutting tools that surface depending on the specific investigation.

  1. fatcousin saas audit export correlatordrop saas audit log csv exports · actor + resource cross-service timeline · runs locally
  2. fatcousin cloud log findings export merge correlatordrop multiple cloud audit findings csv · dedupe + rank cross-account hits · runs locally
  3. fatcousin browser artifact export correlatordrop browser forensic tool csv exports · overlap urls + downloads + cookies timeline · runs locally
  4. fatcousin mobile artifact export correlatordrop ios/android forensic csv exports · correlate device id + app bundle timeline · runs locally
  5. fatcousin messaging app export correlatordrop messaging forensic csv exports · participant + thread id overlap · runs locally
  6. evidence manifest generatordrop evidence files · compute md5 sha1 sha256 · chain of custody manifest · case number · analyst · export pdf and csv · runs locally
// pattern-matched

related tools

tools that the manifest-classifier flagged as plausibly useful here but that aren't in the hand-curated lists above. less editorial weight — scan, don't work top-down.

want deeper correlation coverage?

this vertical is intentionally sparse — deep-moat coverage grows over time. tracked in the forensics rollout.

ready