Investigation Unit (Forensic)
Every detected attack triggers an alert with a unique investigation link. This link is designed for rapid response without login barriers.
Tokenized Access
The investigation link is protected by a SHA-256 token. Link format:
/dashboard/investigate.php?ip=[IP]&site_id=[ID]&token=[HASH]
Forensic Data:
- GeoIP Analysis: Country of origin, city, and attacker's ISP.
- Payload Data: Raw script or query used in the attack.
- User Agent: Device identity used by the attacker.
- Attack Evidence: History of the last 15 hits from the same IP.
- Payload Data: Raw script or query used in the attack.
- User Agent: Device identity used by the attacker.
- Attack Evidence: History of the last 15 hits from the same IP.