Windows Logs
Windows event data exported as plain text
Supported formats
TXT • LOG • CSV
CYBERTRACE AI
Operations/New investigation
Secure workspaceExit
Incident response workspace
Upload Incident Evidence
CyberTrace AI correlates forensic evidence from multiple sources and reconstructs a unified incident timeline.
Evidence encrypted in transit
01
0 FILESEvidence intake
Drop supported plain-text evidence files
Supported Evidence Sources
Firewall Logs
Firewall activity exported as plain text
Supported formats
TXT • LOG • CSV
Email Evidence
Email indicators exported as plain text
Supported formats
TXT • LOG • CSV
Network Logs
Network activity exported as plain text
Supported formats
TXT • LOG • CSV
Evidence is sent securely when the investigation starts
AI agent workflow
Agents initialize after evidence intake
01Waiting
Evidence Parser Agent
Validates and normalizes artifacts
02Waiting
Timeline Reconstruction Agent
Correlates events across sources
03Waiting
MITRE ATT&CK Mapping Agent
Maps observed tactics and techniques
04Waiting
Threat Analysis Engine
Reasons across the complete incident
05Waiting
Response Planning Engine
Prepares prioritized response actions
02
Investigation summary
AI-generated incident findings
Awaiting incident evidence.
Upload one or more artifacts to begin building the investigation report.