Kage 影 is a Windows host DFIR triage console. Point it at a suspect machine, get everything back in one sealed chain: artefact collection, Sigma-correlated timeline, YARA verdicts, open sockets tied to processes, local accounts, disk root anomalies, logging blind spots, indicator reputation, and a calibrated risk score with the report behind it.
python forensics dfir threat-hunting digital-forensics soc triage security-tools blue-team incient-response
-
Updated
Sep 18, 2026 - Python