Diamond — a free DFIR tool on pranithjain.qzz.io. Browser-side security analysis, no signup required.
This is a free, browser-based DFIR toolkit on pranithjain.qzz.io. No signup required — all processing runs locally in your browser.
Caltagirone, Pendergast & Betz, 2013. Every intrusion event is a connected diamond of Adversary, Capability, Infrastructure and Victim, plus meta-features describing the event itself.
Pairs with the Cyber Kill Chain (where in the timeline) and MITRE ATT&CK (which TTPs).
Paste any IP / IPv6 / domain / URL / hash / CVE / ransomware-actor-name - we pull context from IOC checker, ip-geo, cross-source correlation, KEV+actor mapping, MalwareBazaar, actor-timeline (MITRE Group), and ransomware-victim cross-match, then populate empty corners. Won't overwrite anything you've already typed.