Tools page
Beginner tools.
Choose one beginner tool inside SocTool. Each tool opens its own workspace. Buttons work, and Enter works inside inputs.
Log Explainer
Paste a simple log and get event meaning, risk, and next step.
Windows Event ID
Explain important Windows Security and Sysmon IDs.
Port Helper
Explain any port from 0 to 65535.
IOC Extractor
Extract IPs, URLs, domains, emails, hashes, and paths.
SOC Note Builder
Generate a beginner investigation note.