thread hijack artifact detector — free browser tool | fatcousin

home

drop sysmon evtx csv · detect thread context modification for code injection · identify process access patterns consistent with suspend-modify-resume thread hijacking · surface thread execution redirection in trusted processes · runs locally

input

drop anti-forensics export

csv · json · jsonl · multiple files · local only

Select file

drop sysmon evtx csv · local only

limits

heuristic screener · vendor schema varies · not definitive proof

status

>ready