Case Management

MX — Country

CASE-20260909-1516 MEDIUM OPEN Assignee: unassigned · Opened 19h ago

Opened from country MX

🔄 Pivot:🌎 MX📁 country

Entities

56
linked to case

IoCs

43
indicators

Entity types

3
dimensions

Evidence events

3
chain of custody

➕ Add anything to this case

Attach any entity — region, country, APT, source, MITRE technique, IoC, nation-state, campaign, data point, mission domain, CVE, malware, ransomware — and all linked entities are pulled in automatically.

🔎 IoC (43)

IndicatorRoleSource
187.161.119.50indicatorpivotsearch · workbench
187.161.112.69indicatorpivotsearch · workbench
45.177.178.194indicatorpivotsearch · workbench
189.139.98.4indicatorpivotsearch · workbench
187.190.144.64indicatorpivotsearch · workbench
187.102.231.11indicatorpivotsearch · workbench
201.138.85.11indicatorpivotsearch · workbench
189.216.169.17indicatorpivotsearch · workbench
189.196.203.132indicatorpivotsearch · workbench
201.138.171.40indicatorpivotsearch · workbench
189.203.45.242indicatorpivotsearch · workbench
201.124.150.41indicatorpivotsearch · workbench
201.145.104.189indicatorpivotsearch · workbench
201.141.8.80indicatorpivotsearch · workbench
206.135.14.210indicatorpivotsearch · workbench
45.174.170.77indicatorpivotsearch · workbench
45.174.169.91indicatorpivotsearch · workbench
45.174.108.136indicatorpivotsearch · workbench
45.174.108.129indicatorpivotsearch · workbench
45.174.108.97indicatorpivotsearch · workbench
38.19.36.3indicatorpivotsearch · workbench
206.135.31.201indicatorpivotsearch · workbench
187.161.119.186indicatorpivotsearch · workbench
187.190.195.176indicatorpivotsearch · workbench
187.251.132.155indicatorpivotsearch · workbench
187.251.132.144indicatorpivotsearch · workbench
187.156.169.68indicatorpivotsearch · workbench
189.162.40.3indicatorpivotsearch · workbench
187.140.244.208indicatorpivotsearch · workbench
189.203.149.120indicatorpivotsearch · workbench
177.229.205.122indicatorpivotsearch · workbench
38.123.220.152indicatorpivotsearch · workbench
205.164.192.115indicatorpivotsearch · workbench
205.147.22.8indicatorpivotsearch · workbench
205.147.22.36indicatorpivotsearch · workbench
104.243.245.93indicatorpivotsearch · workbench
104.243.245.61indicatorpivotsearch · workbench
122.8.185.183indicatorpivotsearch · workbench
122.8.185.102indicatorpivotsearch · workbench
34.51.116.34indicatorpivotsearch · workbench
200.76.170.199indicatorpivotsearch · workbench
189.217.18.109indicatorpivotsearch · workbench
189.203.45.208indicatorpivotsearch · workbench

🔒 Ransomware (12)

qilinthegentlemenclopspacebearsthreeamdirewolfBooba Projectmedusalockerincransomlockbit5krybitVexy Ransomware

🌎 Country (1)

MX

🤖 Case Operations

AI Copilot brief AI Skills Skills Library Playbooks Playbook Library Workstations Automations Correlation graph Data Points Sources Export STIX/MISP Evidence report Watchlist Report

📜 Chain of Evidence (tamper-evident, hash-chained)

WhenActorActionEntitySourceHash
2026-09-09 08:45:18analystexpandcountry: MXgraph+live · 55 linked entities pullee5e8aed736
2026-09-09 08:45:10analystaddcountry: MXmanual · primary9d13229ff3
2026-09-09 08:45:10analystopencountry: MXanalyst · case createdf471c2ff67

Each record's hash chains to the previous, so any tampering is detectable. Export the full trail via the Evidence report.

📝 Case Notes (0)

← All Cases
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Escalate from triage

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Legal & LEPlaybooksReports