Cloud Event Parser

Parse AWS CloudTrail events into normalized actor, action, resource and auth fields with an explainable risk score and ATT&CK mapping.

Parse Azure Activity and Entra ID sign-in / audit logs into normalized caller, operation, resource and auth fields with an explainable risk score and ATT&CK mapping.