Detection / Malware analysis / Automation
Less noise.
More evidence.
Follow the traffic. Unpack the file. Make the call.
A personal security engineering workbench.
Free to use No account required Built for real work
Projects
MUNINOSINT & Evidence
Turn scattered sources and leads into a structured investigation, with every finding traceable to its source.
Open project
PCAP TriageNetwork Investigation
Reconstruct network activity, follow conversations, and extract the indicators that matter.
Open project
VALKYRIEIncident Response
Keep evidence, timeline, actions and decisions together from first alert to final report.
Open project
Your workbench
A tool for the next question.
From the first indicator to the final report.
Pick a starting point and get to work.
12 tools ready to use
Collect
Examine
- PCAP TriageProtocol decoding and flow tracking over a capture, in the tab..pcap · .pcapng · .cap
- Email ForensicsSender verification, header hops and IOCs from a raw message..eml · .txt
- Binary TriageStatic PE, ELF and Mach-O work: headers, imports, entropy, strings.PE · ELF · Mach-O
- Artifact TriageHashing, entropy, YARA matching and IOC detection on a dropped file.Files · hashes · YARA
- Hash AnalysisLikely hash types, confidence levels and hashcat or John investigation hints.Hashes · hashcat · John
Decide
- Incident ResponseLocal case management with a timeline and evidence trail.Cases · evidence · timelines
- CVSS TriageCVSS v4 vector parsing with context-aware triage guidance.CVSS v4 · context · priority
- Risk RegisterScenario and treatment tracking you can hand to someone else.Scenarios · treatment · review
No matching tools
Try a task like “phishing” or a file type like “pcap”.
Built at the workbench.
Tools for investigating, understanding and sharing what you find.
Odin Midtgård / Norway
From the sample to the alert.
I take commodity malware apart and turn the findings into tested detections and automation. QbitX is where I share the tools, the methods and the reasoning.
Meet Odin