Security Analyst Toolkit

Security Analyst Toolkit is a professional cybersecurity utility designed to help analysts investigate alerts, research indicators, document findings, and manage security cases from one place.

Built for practical security operations, the Toolkit brings together commonly used analyst workflows and reference material in a focused mobile experience.

Key capabilities include:

• Case Vault for creating and managing security investigations
• Incident journal and timeline tracking
• Live threat-intelligence lookups for indicators such as IP addresses, domains, URLs, hashes, and vulnerabilities
• Security reference material and analyst tools
• IOC and enrichment workflows
• Findings, remediation, containment, recovery, root cause, lessons learned, and closure documentation
• Portable backup and restore for Case Vault data
• Local recovery points for case protection
• Support issue and feature request actions
• In-app access to the Security Analyst Toolkit privacy policy

Case and incident information is stored locally on the device by default. The app does not automatically sync complete cases to a cloud database.

When a user intentionally performs a live intelligence lookup, only the selected indicator required for that lookup is transmitted through the DPLex Technologies service to the appropriate threat-intelligence provider.

Security Analyst Toolkit is intended for cybersecurity analysts, IT professionals, incident responders, technicians, and other users working with security investigations and technical analysis.

Developed by DPLex Technologies LLC.