LogLens digital forensics desk
Find who changed what. Prove the log was not touched.
Rules flag suspicious events, Gemini explains them, and a SHA-256 hash seals the evidence.
Changes made
Every update, delete or admin form post in the log. "Who" is the account that made it; an account can be stolen, so check the reasons.
What happened
Only the parsed event lines (max 200) go to Google Gemini. Raw files stay in your browser.
Timeline
No case open yet
Pick “ERP marks tampering” to watch a 2 AM marks change come apart event by event, or paste your own log. The timeline, the AI summary and the evidence check appear here.