How deathbydata/oneshot-secops works
oneshot-secops is a pair of offline, single-file browser tools for first-look analysis of firewall and web access logs. An analyst opens the relevant HTML file, loads logs, reviews parsed events and triage leads, then exports a filtered CSV or case summary. The README documents the capabilities and this workflow, but the HTML source was not sampled, so internal implementation details and finer-grained call relationships cannot be verified. Both tools keep analysis in the browser and make no network requests.
Main entry points: fortigate-log-triage.html FortiGate tool · web-log-triage.html Web log tool
Components 18
Shared triage capabilities
- Load and hash files
fortigate-log-triage.html - Detect and parse formats
fortigate-log-triage.html - Timeline and filters
fortigate-log-triage.html - Events table
fortigate-log-triage.html - Source cards
fortigate-log-triage.html - Top values
fortigate-log-triage.html - CSV and case summary
fortigate-log-triage.html
FortiGate triage
- FortiGate tool
fortigate-log-triage.html - FortiGate formats
fortigate-log-triage.html - Device context
fortigate-log-triage.html - Firewall leads
fortigate-log-triage.html - Communication matrix
fortigate-log-triage.html
Web access triage
- Web log tool
web-log-triage.html - Web log formats
web-log-triage.html - URL pattern checks
web-log-triage.html - Web leads
web-log-triage.html - Conversations
web-log-triage.html
Other components
- Security analyst
Connections 24
- Security analyst → FortiGate tool: opens and analyzes
README.md - Security analyst → Web log tool: opens and analyzes
README.md - FortiGate tool → Load and hash files: loads files
README.md - Web log tool → Load and hash files: loads files
README.md - FortiGate tool → Detect and parse formats: detects and parses
README.md - Web log tool → Detect and parse formats: detects and parses
README.md - FortiGate tool → FortiGate formats: reads
README.md - Web log tool → Web log formats: reads
README.md - FortiGate tool → Timeline and filters: provides
README.md - Web log tool → Timeline and filters: provides
README.md - FortiGate tool → Events table: presents
README.md - Web log tool → Events table: presents
README.md - FortiGate tool → Source cards: provides
README.md - Web log tool → Source cards: provides
README.md - FortiGate tool → Top values: summarizes
README.md - Web log tool → Top values: summarizes
README.md - FortiGate tool → Device context: identifies devices
README.md - FortiGate tool → Firewall leads: raises heuristic leads
README.md - FortiGate tool → Communication matrix: summarizes flows
README.md - Web log tool → URL pattern checks: checks decoded URLs
README.md - Web log tool → Web leads: raises heuristic leads
README.md - Web log tool → Conversations: groups requests
README.md - FortiGate tool → CSV and case summary: exports findings
README.md - Web log tool → CSV and case summary: exports findings
README.md