Find defense gaps in an attack's progression.
Produces an evidence-based incident report showing attack progression, detection gaps, and prioritized defensive improvements.
When to use it
Use for post-incident analysis, designing layered defenses, or explaining attack progression to non-technical stakeholders.
Give it an incident timeline and forensic evidence; it returns a phase-by-phase analysis report with detection findings and defensive recommendations.
What you provide
No setup requirements listed.
No additional actions listed.