Technology
We engineer the tools we wish existed: cloud-first, investigation ready, and validated in the field. They set us apart by delivering automation that speeds up response, deep visibility into the attack path, and evidence that stands up to scrutiny.
Our stack accelerates everything from log collection to cloud investigations. Some are open source, some are internal, but all are battle tested in real incidents. Tools Built for Cloud Response and used by publicly traded companies, downloaded 20,000+ times, and trusted in critical investigations for global enterprises and law enforcement.
Instructions
If you intend to use this component with Finsweet's Table of Contents attributes follow these steps:
- Remove the current class from the content27_link item as Webflows native current state will automatically be applied.
- To add interactions which automatically expand and collapse sections in the table of contents select the content27_h-trigger element, add an element trigger and select Mouse click (tap)
- For the 1st click select the custom animation Content 27 table of contents [Expand] and for the 2nd click select the custom animation Content 27 table of contents [Collapse].
- In the Trigger Settings, deselect all checkboxes other than Desktop and above. This disables the interaction on tablet and below to prevent bugs when scrolling.
Cloud Insights
Rapid visibility into cloud risk, identity exposure, and forensic readiness.
- Map misconfigurations and risky identities across M365, Entra ID, and Azure.
- Highlight the highest-impact weaknesses attackers are most likely to exploit.
- Reveal log and evidence gaps before or during an incident.
- Turn a sprawling cloud estate into a clear, prioritized action list.
Extractor Suite
A PowerShell tool designed to streamline the process of collecting all necessary data and information from various sources within Microsoft.
KubeForenSys
A tool for collecting Kubernetes cluster data and ingesting it into Azure Log Analytics workspace for analysis post-compromise.
ALFA
ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit logs and to perform automated forensic analysis on the audit logs using statistics and the MITRE ATT&CK Cloud Framework.
Invictus-AWS
A tool for AWS incident response, that allows for enumeration, acquisition and analysis of data from AWS environments for the purpose of incident response.
Be ready for the next cloud incident.
