Offline Microsoft 365 forensic triage for exported CSV logs (UAL + Entra ID sign-ins). Generates a court-friendly, evidence-focused HTML report and SQLite dataset with suspicious activity findings no Microsoft APIs required.
csv offline sqlite incident-response forensics dfir audit-logs threat-hunting html-report soc email-security bec azure-ad m365 microsoft-365 entra-id unified-audit-log signin-logs threat-huntingsecurity
-
Updated
Jan 18, 2026 - HTML