Multi-Format Threat Analysis.
Detect Threats Instantly.
Instant client-side threat detection for PCAP captures, PDF documents, Emails (.eml), Images, and Office files — combined with automated website domain security audits.
Analysis Modules Launcher
Launch targeted threat detection engines built for specific artifact types.
Detects port scans, SYN floods, ARP spoofing, and 10+ attack patterns using heuristic packet analysis.
- Rate & window velocity monitoring
- DNS tunneling & exfiltration detection
- Local PCAP / PCAPNG binary decoder
Inspects PDF dictionary objects for auto-executing scripts, hidden streams, and malicious payloads.
- /OpenAction & /JavaScript trigger audit
- Embedded file object extraction
- Obfuscated stream entropy check
Evaluates MIME structure, header authentication alignment (SPF/DMARC), and anchor URL mismatches.
- From vs Return-Path sender validation
- Suspicious attachment type flagging
- MIME multipart structure parsing
Parses EXIF camera metadata, GPS locations, and flags hidden data appended past End-Of-Image trailers.
- JPEG/PNG trailer offset inspection
- Camera EXIF & GPS metadata extraction
- Suspicious payload bytes alert
Scans OpenXML .docx and .xlsx archives for auto-run macros, DDE execution, and external web queries.
- VBA Macro code stream detection
- DDE (Dynamic Data Exchange) flags
- External relationship link auditing
Audits live website security headers (HSTS, CSP), SSL/TLS certificate chains, and DNS SPF/DMARC records.
- HTTP Security Response Headers audit
- TLS/SSL Certificate validation
- DNS email authentication records check
How Sentry Console Works
A 4-step automated pipeline designed for zero-install, privacy-first security triage.
Drop network captures (.pcap/.pcapng), PDFs, EML emails, Images, Office docs, or type a website domain URL.
Binary headers, MIME streams, EXIF metadata, and OpenXML archives are parsed inside your browser memory.
Our heuristic detection engine evaluates SYN bursts, port scans, embedded scripts, spoofed senders, and stego markers.
Get an instant Universal Security Score (0–100), extract IOCs, review interactive flow charts, and download PDF reports.
Comprehensive Detection Coverage
See exactly what checks are performed across each analysis module.
| Capabilities & Detection Rules | Network PCAP | PDF Docs | Email (.eml) | Image Stego | Office Docs | Website / Domain |
|---|---|---|---|---|---|---|
| Heuristic Traffic Analysis Binary packet header & payload stream evaluation | ✓ | — | — | — | — | — |
| Port Scan & SYN Flood Detection Rate thresholding over sliding 5-second window | ✓ | — | — | — | — | — |
| Script Execution Triggers (/OpenAction) Catalog dictionary parsing for obfuscated JavaScript | — | ✓ | — | — | — | — |
| Email Header & MIME Spoofing Check From vs Return-Path alignment & anchor verification | — | — | ✓ | — | — | — |
| Steganography Marker Inspection Trailer offset analysis past End-Of-Image signatures | — | — | — | ✓ | — | — |
| EXIF & Geolocation Extraction Camera make, software build, and GPS metadata | — | — | — | ✓ | — | — |
| VBA Macro & DDE Payload Detection OpenXML archive stream inspection for macros | — | — | — | — | ✓ | — |
| HTTP Security Headers & TLS Audit HSTS, CSP, X-Frame-Options, SSL cert validity | — | — | — | — | — | ✓ |
| DNS SPF / DKIM / DMARC Record Lookup Domain email authentication policy verification | — | — | — | — | — | ✓ |
| Universal Security Scoring (0–100) Normalized risk classification score | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| PDF Forensic Report Export Print-ready executive triage summary | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
Built for analysts who need answers fast.
Replaces disconnected tools. Analyze network PCAPs, malicious PDF attachments, spoofed emails, stego images, and domain headers in one unified console.
Manual PCAP analysis in Wireshark and file inspection is slow. Sentry Console surfaces critical findings in seconds so responders can act first.
Every file byte stays inside your browser via Web File APIs. Your sensitive production captures and evidence never touch a third-party server.
Designed for SOC analysts doing incident triage, incident response teams, students learning network forensics, and security researchers.
Trust & Privacy Architecture
We are explicit about where processing occurs.
| Feature & Artifact Type | Execution Boundary | Network Requirement | Privacy Status |
|---|---|---|---|
| PCAP / PCAPNG Network Captures | 100% In-Browser JS Engine | None (Offline) | 🔒 File Never Leaves Browser |
| PDF Documents & Streams | 100% In-Browser JS Engine | None (Offline) | 🔒 File Never Leaves Browser |
| Email (.eml) MIME & Headers | 100% In-Browser JS Engine | None (Offline) | 🔒 File Never Leaves Browser |
| Images (JPG / PNG / GIF EXIF & Stego) | 100% In-Browser JS Engine | None (Offline) | 🔒 File Never Leaves Browser |
| Office Docs (DOCX / XLSX Macros) | 100% In-Browser JS Engine | None (Offline) | 🔒 File Never Leaves Browser |
| Website & Domain Security Scans | Node.js Backend Service Proxy | Server-Side Network Request | 🌐 Server Fetches Domain Headers |