Abstract: A non-transitory computer-readable medium comprising instructions which, when executed by a computer system, cause the computer system to carry out a method of forensic artifact analysis including steps of receiving from an end user a request to analyze for potential maliciousness an artifact which is included with the request, identifying a type of the received artifact, delivering the artifact to an analyzer adapted to analyze the identified artifact type, wherein the analyzer produces an analysis output, generating a query to a central intelligence database based on the analysis output, analyzing the artifact and results of the query using a plurality of analysis modules to provide information regarding maliciousness of the artifact, and providing a visualization of results of the analysis by the plurality of analysis modules to the end user.