Open-source Laravel scanner detects intrusion evidence by analyzing filesystem changes.

Laravel Scalpel is an open-source tool designed to detect evidence of server intrusion after a Laravel application compromise. It scans the deployed filesystem for unauthorized changes, such as suspicious PHP files, obfuscated code, and altered configuration files. The scanner can also compare the current system against a previously recorded baseline of trusted files. While useful for identifying evidence, the tool is not a security containment measure and developers are advised to run it from an external trigger when possible.