home

drop forensic artifact csvs · CERT/NITTF behavioral rubric · composite risk profile · runs locally

drop file access, logon, email, usb, browser csvs
or click

file access · logon · email · usb · print · browser · network — investigative leads only, not conclusions

drop forensic artifact csvs for one user
This tool produces investigative leads, not conclusions. All scores require human review. No single indicator is definitive.
ready