Newly listed sites

Build threat-hunting timelines from Windows event logs

A framework for forensic memory analysis

A desktop platform for hard-drive investigations

Prepare forensic timeline data with log2timeline tools

Investigate forensic timelines collaboratively

A self-hosted workspace for collaborative investigations

Connect threat-intelligence sources in a shared data model

Structure and share threat intelligence with controlled distribution

Analyze investigation observables through a shared engine

Organize incident-response cases and team work

Collect forensic evidence from an administered endpoint fleet

Correlate PCAP, Zeek logs and Suricata alerts

Host intrusion detection with file and log monitoring

Endpoint and cloud security monitoring with SIEM workflows

A combined network and host investigation platform

Rule-based network detection with optional inline prevention

Turn network activity into structured investigation logs

Security data, endpoint signals and investigation workflows

Endpoint response with customizable playbooks

Endpoint investigation with device and response controls

Business endpoint protection with a risk dashboard

A managed platform for endpoint investigation and response

Centrally managed endpoint policies and remediation

Endpoint protection with behavior and exploit controls