工具：当电子表格无法满足您的 IR 案例管理需求时您唯一需要的“Kanvas”就是它.pdf

1、The Only Kanvas You Need When Spreadsheets Fail Your IR Case ManagementSANS DFIR SummitEurope 2025Jinto Antony(joe)Senior Investigator-Incident Resposne at Withsecure(UK)Developer of Kanvas IR Case MGT Tool,Other community projects,OneTracker.org ZEEK App for Threat Hunting(Splunk Base)blogT AM I?S.

2、O.D.is Great,But.Why Another ToolWhat if we could use the samefor IR case management withthat makes iteasier to manage spreadsheets,handle workflows and note-taking-all without switching“”between multiple Tools/Application?Excel Files.txt/.md Files+=KanvasWhy Another ToolKanvas Demover 0.4.4MITRE At

3、tack Flow 3.0TimelineLateral MovementMITRE ATTACK&D3FEND MappingNote Taking&PlaybooksExternal Lookups for Threat IntelBookmarks V.E.R.I.S.Reporting Data Export(defang&others)STIX 2.0 ExportLLM Assistance ver 0.4.3API Integrations Multi User collaboration supportLLM Workflows Response ActionsMore API Integrations Whats nextAirtablesupabaseIf you find the project helpful,dont forget to drop a on GitHub!https:/