account takeover incident kit — free browser tool | fatcousin

drop authentication log + device fingerprint + email change log · attribute initial access + lateral movement · runs locally

input

drop case investigation evidence

csv · json · jsonl · multiple files · local only

Select file

auth log · device fingerprint · email change · local only

limits

heuristic screener · vendor schema varies · not definitive proof

status

>ready