Investigation workspace / SD-01

Turn noisy events into a defensible first read.

Normalize JSON, JSONL, or CSV logs, correlate high-signal behavior, and record triage decisions without sending evidence to a server.

• Vanilla JavaScript
• Zero runtime dependencies
• Tested detection rules

Try the demo Inspect the critical sign-in →