Tools
Self-contained utilities that run entirely in your browser — single-file pages with no accounts, no storage, and no third-party telemetry. Any network calls go only to the service you point a tool at.
Pebble Email Header Analysis
Offline email header forensics: SPF / DKIM / DMARC
verdicts, Microsoft 365 anti-spam decode, Received-chain timeline with delay
anomalies, IOC extraction with reputation pivots, and cross-case comparison
for campaign spotting.
Graph Recon Console
Azure / Entra ID enumeration and AzureHound
telemetry lab for authorized testing and detection engineering. Query Microsoft
Graph and ARM with a token you supply, replay AzureHound-style collection presets,
inspect JWT claims, and export results — so the activity surfaces in your tenant
logs for hunting. Authorized use only.