Select a dataset above and run the engine. BlackIce will replay all authentication sequences and surface every anomaly with full explanation.
| User ID | Timestamp | Rule Fired | Risk Score | Verdict | Evidence |
|---|
Upload your login logs — BlackIce analyzes suspicious behavior and flags potential account takeovers.
Drag & drop your CSV or JSONL file here, or click to browse.
Max file size: 5MB · Max 10,000 events in sandbox mode.
File ready. BlackIce will parse your events, reconstruct attacker sequences, and surface anomalies with full reason codes.
| User ID | Timestamp | Rule Fired | Risk Score | Verdict | Evidence |
|---|
{"user_id":"u_1a2b","timestamp":"2026-01-15T09:14:22Z","ip":"185.12.44.3","device_id":"dev_abc","geo":"DE","action":"login"}
{"user_id":"u_1a2b","timestamp":"2026-01-15T09:31:07Z","ip":"103.25.8.91","device_id":"dev_abc","geo":"SG","action":"login"}
user_id,timestamp,ip,device_id,geo,action u_1a2b,2026-01-15T09:14:22Z,185.12.44.3,dev_abc,DE,login u_1a2b,2026-01-15T09:31:07Z,103.25.8.91,dev_abc,SG,login
Compare the last 10 runs saved locally in your browser.
| User ID | Timestamp | Rule Fired | Risk Score | Verdict | Evidence |
|---|