Use a Suite of Tools, Not One

Core idea

No single tool does everything well. The block explorer is the best source for raw transactions and wallets, Arkham is strongest for attribution and alerts, a charting tool like MetaSleuth is for visualizing the case, and an OSINT search tool speeds up attribution. Capable investigations are possible entirely with free or low-cost tools rather than platforms costing 20,000 dollars or more per year.

Components

• Block explorer (Etherscan, mempool.space): ground truth for transactions and balances.
• Arkham (free): attribution, relationships, alerts and monitoring.
• MetaSleuth (low cost): visualizing and mapping the case, not the primary investigation surface.
• OSINT search tools (e.g. Spectra) and wallet-risk tools (e.g. Misttrack, Gnomonist): research and risk scoring.
• High-budget alternatives: Chainalysis, TRM, Elliptic for deeper attribution.

When to use

When scoping how to run a case on a constrained budget, or deciding which tool to reach for at each stage.

Avoid when

Expecting low-cost tools to match the attribution depth (for example dark-market coverage) of paid industry platforms. Accept some gaps.

Related

Arkham for Attribution and Visualization, Reading an Ethereum Transaction Page