Developer reference

Forensic Triage Cheatsheet

Browser-local IOC, hash, email header, defang, Safe Links, and log timeline reminders.

Defanged URL

Safer sharing shape for suspicious URLs.

hxxps://example[.]com/path

Documentation-range IP example for IOC extraction.

203.0.113.10

Common hash identifier hint.

32 hex characters

Email path header shape.

Received: from host by mx;