Sentinel is a cybercrime investigation and intelligence platform designed for analysts, forensic teams, and security investigators to manage cases, connect digital evidence, and reconstruct complex cyber incidents through a visual investigation workspace.
Sentinel transforms fragmented investigative data into a structured intelligence environment.
Instead of working across spreadsheets, logs, documents, and disconnected tools, investigators can: -Organize full cybercrime cases -Map relationships between entities (people, domains, IPs, devices) -Analyze and manage digital evidence -Reconstruct attack timelines -Build and validate investigative theories -Collaborate securely within controlled case access
The platform is designed to support both structured case management and open-ended investigative thinking.
Each investigation is structured as a case with controlled access. -Case creation and assignment -Role-based collaboration -Lead investigator control -Secure case-level permissions
Centralized evidence storage and analysis. -Upload and manage evidence files -Tag and link evidence to cases and entities -Inspect metadata and relationships -Edit and update evidence after creation
Tracks and connects all investigation entities: -People -Organizations -IP addresses -Domains -Devices -Wallets
Each entity is connected through relationships and shared evidence.
A visual intelligence canvas for investigation building.
Investigators can: -Drag and drop evidence, entities, and notes -Create relationship links between objects -Build hypothesis-based “theory maps” -Explore investigation patterns visually -Switch into full-screen analysis mode
This replaces traditional static dashboards with an interactive investigation environment.
Rebuild incidents step-by-step: -Chronological event mapping -Evidence-linked timeline entries -Entity involvement tracking -Filtering by case context
Structured intelligence reporting: -Generate case reports -Summarize findings and evidence -Export reports as shareable documents -Present investigations in view-only mode
Sentinel enforces strict case-based security:
-Users only see cases they are part of -Lead investigators control case permissions -Role-based access (investigator, analyst, reviewer, viewer) -View-only sharing mode for external stakeholders
Real-time investigation updates:
-Case invitations (collaborator + view-only) -Accept / decline workflows -Activity tracking across cases -Secure notification previews
Sentinel is built as a professional intelligence platform, not a generic dashboard.
###Design principles:
-Data-dense, structured UI -Analyst-first workflows -Minimal visual noise -Enterprise-grade layout system -Clear hierarchy of investigative information
The interface is designed to feel like real-world cybercrime and intelligence analysis software.
Unlike traditional tools, Sentinel combines: -Case management -Evidence analysis -Relationship mapping -Timeline reconstruction -Visual investigative reasoning into a single unified intelligence workspace.
Sentinel is built to simulate how real-world investigators think:
Not just storing data — but connecting it, questioning it, and reasoning through it visually.