Iqbal's Basilisk Lab

I built PhantomTrace because I wanted more practice with what comes after a security alert. In my cybersecurity studies, I learned to recognize suspicious activity. I wanted a way to practice deciding what to check first, tracing findings back to the original logs, and explaining what still needs verification. PhantomTrace is an investigation workspace for cybersecurity students, junior analysts, and small IT teams. It builds a timeline from submitted logs, checks permission changes against supplied change records, and shows the original evidence behind each finding. It also compares claims from a reviewed witness transcript with specific fields in the logs. In the demo, a witness statement names trainee as the actor, while the original log records admin. PhantomTrace surfaces that discrepancy and gives the next analyst concrete follow-up checks.