Intelligence overview

N
Authorized userAnalyst

Operational picture

What needs attention now

Loading current workspace…

Open investigations—Active cases
Tracked indicators—— high risk
Active alerts—Awaiting review
Integrations online—Enrichment sources

Threat stream

Recent intelligence

Loading threat activity…

Data sources

Integration health

Checking integrations…

Case queue

Current investigations

Loading investigations…

Multi-source enrichment

IP and domain lookup

Query configured intelligence providers without exposing API keys to the browser.

Ready for analysis

Results from GreyNoise, AbuseIPDB, VirusTotal, and OTX will appear here.

Case management

Investigations

Loading investigations…

Indicator repository

IOC tracker

Loading indicators…

Analyst deliverables

Reports

Loading reports…

Priority queue

Alerts

Loading alerts…

New case

Create investigation

Track indicator

Add IOC

New deliverable

Create report