Offline-first incident response orchestrator for air-gapped SOCs and lab environments.

This IOC captures a foundational stage in the cyber kill chain: reconnaissance — where the attacker has not yet breached the system, but is actively probing to discover what might be open, unguarded, or improperly exposed.

OACSP-Forensics: a cross-modal selective prediction benchmark for digital forensic triage. Applies ordinal-aware class-conditional selective prediction to phishing URLs (PhishTank), malware binaries (EMBER), and memory forensics (CIC-MalMem-2022) with Daubert-aligned evaluation and coverage-risk curves for court-admissible AI triage.

Free Android defence forensic triage and reporting framework for authorized ADB-based acquisition, app lifecycle analysis, evidence hashing, timeline generation, risk scoring, and professional reports.

Forensic triage instrument for disputed video evidence. Performs binary-level MP4/MOV container structure analysis of atom hierarchy, edit lists, chunk offsets, metadata, and device-class signatures to identify files warranting further forensic examination.