H3AD-OPS
SECOPS AUTOMATION
by H3AD

Copy-Ready Queries.
Guided Investigations.

QUICKTRACE gives L1-L2 analysts copy-ready triage queries spanning auth, network, endpoint, SIEM, and email. PHISHOPS walks a phishing case from triage through closure with IOCs aggregated automatically as you go.

TOOLS
QT
QUICKTRACE
Daily Workflow Queries · Static Library
LIVE
Pre-built daily triage queries across auth, network, endpoint, SIEM, and email, named for what they find, not what they use.
18 QUERIES · 5 CATEGORIES · XQL / KQL / SPL
LAUNCH QUICKTRACE →
PO
PHISHOPS
Phishing Investigation Tracker · Manual + Auto
LIVE
Guided 7-step phishing investigation, or drop a raw EML for automated parsing and scoring, with IOCs aggregated live as you work.
7 STEPS · 2 MODES · VIRUSTOTAL / URLSCAN / RDAP
LAUNCH PHISHOPS →

TRUST & ARCHITECTURE

Static Query Library
Queries load from a public read-only manifest. Nothing you type into a query panel is ever sent anywhere.
QUICKTRACE
Client-Side + Optional Enrichment
Runs entirely in your browser. Auto-scan mode optionally calls VirusTotal, URLScan, and RDAP using your own free keys, never PHISHOPS's server.
PHISHOPS