// TOOLS

Security Tools

📊 Security Log Analyzer

Paste Apache or Nginx logs and it does more than flag lines: it surfaces the top attacker IPs and paths, detects scanners, extracts the IOCs ready to paste and generates a Sigma/KQL rule from the dominant pattern. Investigating a Windows event? Browse the Windows Event ID reference.

Frequently asked questions

What does it detect in logs?

Attack signatures (SQLi, XSS, LFI, RCE, SSRF, brute force, webshells…) in Apache/Nginx logs, with top IPs and paths, scanner detection by User-Agent and IOCs.

Does it generate detection rules?

Yes, it builds a Sigma/KQL rule for the dominant pattern and links to Sigma Forge.

Is the log uploaded?

No, it is analyzed in your browser.