Tools
Small tools I use at work and in my home lab. Most run entirely in your browser and send nothing anywhere. The two lookup tools need online services, and each one says exactly where your data goes.
Investigate
Paste what you're looking into: email headers, logs, or encoded data.
Email header analyzer
See a message's delivery path and its SPF, DKIM, and DMARC results, and spot signs of spoofing.
SPFDKIMDMARCLog viewer
Turn JSON, syslog, CEF, LEEF, key=value, or Windows Event XML into a table, with UTC times and extracted indicators.
SyslogCEFJSONCyberChef
A self-hosted copy of GCHQ's CyberChef for decoding, hashing, and inspecting data, with a few starter recipes.
DecodeHashInspect
Look up
Check public records for a CVE, a domain, or an IP address.
Generate and calculate
Make strong secrets and plan address ranges.