Incident response & forensic analysis
From suspicious archive to evidence in minutes
During an incident you need to know fast what a file or package does, and you need evidence that holds.
Early access
Muninn
Incident-response workspace with evidence-grade forensic reports and chain of custody.
- Hashes (MD5, SHA-256) of the upload and every file inside it
- Findings with the exact code lines, engine versions and timings
- Case workspaces with relationship graphs (Norn, early access)
Available now
What you can use today
- Forensic report per scan with JSON export
- Live view of the analysis
- Air-gapped sandbox