form-driven finding block · timestamps normalized to iso · evidence numbered · live markdown preview · export md/txt · runs locally
comma or newline separated hostnames, ips, accounts
one item per line — auto-numbered in output
paste any format — normalized to iso 8601 utc in preview