Open-weight Llama 3.1 8B · SHA-256 sealed · MITRE ATT&CK
Find who changed what.Prove the log was not touched.
Rules flag events, open-weight AI (Llama 3.1 8B by Meta, Llama licence) explains them, a SHA-256 hash with a signed server receipt seals the evidence.
Open a case
IntakePick a sample case (three made up for the demo, one real public log) or paste / upload your own log.
Sent with each server receipt: this name, the file name, size and SHA-256 go to a shared demo ledger (no login). The log text does not.
Formats, storage & privacy
Timelines: ERP audit CSV, Linux auth.log, Apache/Nginx access and Apache error logs. Any other file (PDF, image) is hashed as evidence.
Saved in this browser only (localStorage): a copy of the locked log, its SHA-256 and the audit trail, so the case survives a reload. New case clears them.
What happened
?
The model is Llama 3.1 8B by Meta. Its weights are public (Llama licence), so anyone can check or run it. It is small, so the rules cap its verdict and every point must cite real events.
AI: open-weight Llama 3.1 8B (Meta, Llama licence), run on Cloudflare Workers AI; Google Gemini only as a backup if Llama fails. Only the parsed event lines (max 200) are sent, with names, IPs, host names and e-mails replaced by USER_1 / IP_1 / HOST_1 / EMAIL_1 when masking is on (system accounts like root stay readable). Raw files stay in your browser.
Changes made
Every update, delete or admin form post in the log. "Who" is the account that made it; an account can be stolen, so check the reasons.
Timeline
- 01
Open the log
ERP audit CSV, Linux auth.log, Apache/Nginx access or Apache error log. It is hashed (SHA-256) the moment it opens.
- 02
Rules flag events
16 explainable rules, each with a reason and a MITRE ATT&CK ID; flagged events are joined into an attack chain.
- 03
Open-weight AI explains
Llama 3.1 8B writes the story in English or Hindi, cross-checked against the rules. AI down: a labelled rule summary shows.
- 04
Seal and verify
Signed server receipt, then verify the same file again: MATCH or TAMPERED, with the changed line.