This site uses cookies to serve ads via Google AdSense and to analyse site usage. By continuing to use this site, you consent to our use of cookies. Privacy Policy

Cyber Guard Forte

Free Tools
SOAR ▼
SIEM ▼
APT Intel ▼
EDR/XDR ▼
AI Security ▼
AI/ML Sec ▼
DFIR ▼
Threat Hunting ▼
Career Builder ▼
Cloud Security ▼
GRC ▼
Blog

Contact

Playbook BuilderBuild automation playbooks for common incidents Maturity AssessmentScore your SOAR programme across 4 dimensions Alert Fatigue CalculatorCalculate analyst overload and reduction ROI Playbook TemplatesReady-to-use templates for 7 incident types ROI CalculatorBuild the business case for SOAR investment

Use Case LibrarySPL + KQL detection queries mapped to MITRE Query TranslatorConvert between SPL, KQL, and Sigma Coverage MatrixVisualise MITRE coverage gaps in your SIEM Log Volume EstimatorEstimate daily EPS and storage requirements Compliance CheckerMap SIEM rules to CERT-In and DPDP requirements Sigma Rule ViewerBrowse and convert community Sigma rules

APT India ReferenceAll groups targeting Indian sectors TTP HeatmapFrequency heatmap for India APTs MITRE ComparisonSide-by-side ATT&CK comparison Malware ReferenceAPT-linked malware families Campaign TimelineChronological APT campaign history Attribution GuideMethodology, evidence, confidence levels Target Profile BuilderWhich APTs are likely to target you APT vs CybercrimeDistinguish targeted vs commodity attacks Initial Access TrackerEvery initial access vector used Lateral Movement RefPer-group lateral movement techniques Defence Evasion Encyc.All evasion techniques with detection Persistence EncyclopediaAll APT persistence mechanisms Credential Theft RefAPT credential stealing techniques Exfil ReferenceAPT data exfiltration techniques LOLBin ReferenceLiving-off-the-land techniques C2 ReferenceAPT command and control techniques Hunt BuilderBuild threat hunt queries for APT TTPs CTI to SIEMConvert threat intel to SIEM rules Recon ScannerDetect APT reconnaissance activity Memory ForensicsAPT memory forensics indicators Diamond Model BuilderBuild Diamond Model for incidents Purple Team MapperMap APT TTPs to red/blue exercises Red Team MapperMap red team tests to APT TTPs Scenario GeneratorGenerate APT scenarios for tabletop Spearphish ProfilerProfile APT spearphishing campaigns Dropper ReferenceAPT dropper and loader techniques STIX ExplorerBrowse APT STIX threat intelligence IOC vs IOAIndicators of attack vs compromise Watering Hole RefAPT watering hole techniques Protocol AbuseAPT protocol abuse and tunnelling TI MaturityAssess your CTI programme maturity Attack SurfaceIdentify APT-relevant attack surface

Use Case LibraryDetection use cases for all major EDR platforms MITRE to EDR MapperTechnique to rule mapping for CS, S1, MDE Sysmon Config GeneratorGenerate production-ready sysmonconfig.xml Hunt Hypothesis GeneratorAPT-specific hunt queries for your EDR Process EncyclopediaNormal vs suspicious Windows process behaviour LOLBin Attack BuilderEvery malicious use of Windows LOLBins Memory Forensics RefVolatility 2 and 3 commands by investigation goal Event ID Reference60 critical Windows security event IDs Alert Triage GuideStep-by-step triage for common EDR alerts Maturity AssessmentScore your EDR programme across 4 dimensions Endpoint HardeningCIS benchmark checklist for Windows and Linux EDR Evasion ReferenceHow attackers bypass EDR and residual signals

Salary BenchmarkerIndian cybersecurity salary ranges 2025 Certification RoadmapPersonalised roadmap with INR costs Career Path ExplorerEvery cybersecurity path in India SOC Skill AssessmentL1 → L3 adaptive knowledge test Interview Question Bank500+ questions with model answers Learning ResourcesFree courses, labs, CTFs for Indian practitioners Resume CheckerScore your CV for Indian cyber hiring Role ComparisonCompare any two cybersecurity roles

Hunt Plan BuilderStructured plan from hypothesis to query Hypothesis Library150+ structured hunt hypotheses Sigma ConverterConvert Sigma to SPL / KQL / EQL SPL Hunt Library60+ production-ready Splunk queries KQL Hunt Library35+ Microsoft Sentinel hunting queries SPL Hunt Library36+ Splunk threat hunting queries IOC Hunt ConverterIOC list → SPL + KQL in 30 seconds Beacon DetectorC2 beacon statistical hunt query Long Tail AnalyserFind rare processes and DNS outliers LOLBin Cluster Hunt3+ LOLBins in 15 min = malicious Kerberos Attack HuntKerberoasting, AS-REP, Golden Ticket SMB Lateral HuntPsExec, admin shares, named pipes Lateral Movement PackWMI, DCOM, WinRM, token impersonation Insider Threat PackOff-hours, bulk access, print/screenshot Data Staging HuntPre-exfil: ZIP, cloud upload, DNS exfil Ransomware Pre-EncryptCatch operators before encryption

Windows Artefact FinderFind artefacts by investigation goal Linux Artefact GuideAuth, execution, persistence, network Browser ForensicsChrome, Firefox, Edge artefact paths Registry Forensics MapShimCache, UserAssist, Run keys and more Memory Acquisition GuideWinPmem, LiME, VM snapshots Forensic Tool ReferenceEvery free tool with key commands Timeline BuilderPaste logs → get chronological timeline Chain of CustodyGenerate legal-grade COC document Timestamp ConverterConvert between 10 forensic timestamp formats Evidence Hash CalculatorMD5/SHA256 in-browser — files never uploaded Windows Event ID Reference100+ Event IDs — attack indicators & tips Evidence Collection ChecklistPlatform + incident-specific IR commands Incident Timeline BuilderMulti-source log timeline reconstructor Artifact Location ReferenceExact paths for 30+ forensic artifacts Malware Triage ChecklistStatic, dynamic & memory analysis workflow Volatility Command RefAll Vol 2 & Vol 3 plugins with syntax

AI Risk RegisterDocument and score your AI system risks AI Acceptable Use PolicyGenerate DPDP-compliant AI AUP AI Procurement ChecklistSecurity questions before buying AI LLM App Security ReviewChecklist for LLM-based applications AI Red Team BuilderStructured AI red team exercise generator RAG Security AssessmentAssess RAG knowledge base security DPDP AI Compliance MapperMap AI systems to DPDP Act obligations RBI AI Finance CheckerRBI AI guidelines for Indian BFSI AI Ethics AssessmentFairness, transparency, accountability TI Summariser ✦ AIAI extracts key intel from any report CVE Explainer ✦ AICVEs in plain English with India context Detection Rule Gen ✦ AIDescribe behaviour, get SPL + KQL rule

MITRE ATLAS ReferenceAI/ML threat matrix for security teams AI-Augmented TTPsHow APTs are using AI to enhance attacks LLM Security ReferenceLLM vulnerabilities and mitigations AI DPDP Risk CheckerDPDP Act compliance for AI/ML systems ML Attack SurfaceCalculate your ML model attack surface Synthetic Media RefDeepfake and synthetic media threats AI SOC Tool EvaluatorEvaluate AI tools for security use cases AI Incident PlaybookIR playbooks for AI-specific incidents

AWS IAM Policy AnalyserPaste policy JSON — get risk findings Cloud IR ChecklistAWS, Azure, GCP incident response

GRC HubAll GRC tools — compliance, risk, policy ISO 27001:2022 ChecklistAll 93 Annex A controls with status tracking RBI IT FrameworkMaster Direction compliance checklist SEBI CSCRF 2024Tier-based checklist for all SEBI entities CERT-In Directions 2022Mandatory for all Indian organisations DPDP Data RegisterData processing register for DPDP Act 2023 Risk Register BuilderISO 27001 risk register with 5x5 matrix Policy Template Library10 ready-to-use security policy templates Cross-Framework MapperMap shared controls across 6 Indian frameworks

Free Tools
SOAR Hub Playbook Builder Maturity Assessment Alert Fatigue Calculator Playbook Templates ROI Calculator
SIEM Hub Use Case Library Query Translator Coverage Matrix Log Volume Estimator Compliance Checker Sigma Rule Viewer
APT Intel Hub APT India Reference Campaign Timeline Attribution Guide Target Profile Builder TTP Heatmap Initial Access Tracker Lateral Movement Ref Defence Evasion Encyc. Hunt Builder Diamond Model Scenario Generator CTI to SIEM Malware Reference STIX Explorer
EDR/XDR Hub Use Case Library MITRE to EDR Mapper Sysmon Config Generator Hunt Hypothesis Generator Process Encyclopedia LOLBin Attack Builder Memory Forensics Ref Windows Event IDs Alert Triage Guide Maturity Assessment Endpoint Hardening EDR Evasion Reference
AI Security Hub MITRE ATLAS LLM Security AI DPDP Risk AI Incident Playbook Prompt Injection Ref Synthetic Media Ref AI Phishing Analyser AI SOC Tool Evaluator
AI/ML Security Hub AI Risk Register Acceptable Use Policy LLM App Security Review DPDP AI Compliance TI Summariser ✦ AI CVE Explainer ✦ AI Detection Rule Gen ✦ AI
Career Hub Salary Benchmarker Certification Roadmap SOC Skill Assessment Interview Questions Resume Checker Role Comparison
Threat Hunting Hub Hunt Plan Builder SPL Hunt Library Beacon Detector Kerberos Hunt Lateral Movement Pack Insider Threat Pack Ransomware Pre-Encrypt
DFIR Hub Windows Artefacts Linux Artefacts Browser Forensics Registry Forensics Map Memory Acquisition Tool Reference Timeline Builder Chain of Custody Timestamp Converter Evidence Hash Calculator Event ID Reference Evidence Checklist Timeline Builder Artifact Locations Malware Triage Volatility Commands
Cloud Security Hub AWS IAM Analyser Cloud IR Checklist
GRC Hub ISO 27001:2022 RBI IT Framework SEBI CSCRF 2024 CERT-In Directions 2022 DPDP Data Register Risk Register Builder Policy Templates Cross-Framework Mapper
Blog
Contact

🔍 Forensic Artifact Reference

Artifact Location Reference

Exact paths, registry keys, and locations for 60+ forensic artifacts across Windows, Linux, and macOS. Search by what you're looking for.

Cyber Guard Forte

Free cybersecurity tools for Indian security professionals — SOC, GRC, DFIR, cloud security, and more.

Free Tools

CERT-In Calculator
IOC Extractor
Breach Cost Estimator
Password Generator
DPDP Quick Check
All 50+ tools →

SIEM

Use Case Library
KQL Hunt Library
SPL Hunt Library
Query Translator
Sigma Rules
All SIEM tools →

SOAR

Playbook Builder
Maturity Assessment
Alert Fatigue
ROI Calculator
All SOAR tools →

Threat Hunting

KQL Hunt Library
SPL Hunt Library
Hunt Plan Builder
Lateral Movement Pack
Ransomware Pre-Encrypt
All hunt tools →

EDR / XDR

Sysmon Config Gen
Process Encyclopedia
LOLBin Builder
Hunt Generator
Use Case Library
All EDR tools →

DFIR

Event ID Reference
Evidence Checklist
Timeline Builder
Artifact Locations
Malware Triage
Volatility Commands
Evidence Hash Calc
All DFIR tools →

Cloud Security

AWS IAM Analyser
Cloud IR Checklist
All cloud tools →

GRC

ISO 27001:2022
RBI IT Framework
SEBI CSCRF 2024
CERT-In Directions
DPDP Register
Risk Register
Policy Templates
Framework Mapper
All GRC tools →

APT Intel

APT India Reference
TTP Heatmap
Hunt Builder
Diamond Model
CTI to SIEM
All APT tools →

Career

Interview Questions
Salary Benchmarker
Cert Roadmap
Skill Assessment
Resume Checker
All career tools →

AI Security

MITRE ATLAS
LLM Security
Prompt Injection
AI IR Playbook
All AI tools →

Company

About
Blog
Contact
Privacy Policy
Terms of Use
Sitemap

© 2026 Cyber Guard Forte. Built for India’s security community.

All tools run client-side where possible. No data leaves your browser.

We use cookies to remember your preferences. No advertising or tracking cookies. Privacy Policy