Paste a suspicious URL → fused AiTM / passkey-helpdesk investigate → decide → act case file.
Finishes the job: ordered user + SOC actions, IOC pack + SIEM strings, paste-ready IT report. Synthetic demos only — not legal advice.