Artifact
The exact analyzed build is identified.
Cyber Intelligence
Join actor identity, software artifacts, email infrastructure, media claims, and supply relationships into an evidence graph.
Which identities, infrastructure, artifacts, vendors, and claims belong in the same incident hypothesis?
Technical observations and identity inferences are separated across the case.
MISSION PHASE
Fix
Preserve artifacts, messages, infrastructure, and timestamps.
01FRAME
02COLLECT
03CHALLENGE
04DECIDE