Detect intrusions in your logs and extract indicators.
Did someone get into your server?
auth.log, journalctl, Apache/Nginx or Windows events: brute force, logins after an attack and what happened next.
IOC extractor
IPs, domains, URLs and hashes from any report, even defanged, ready to block or share.
Ciberkit