Case Management

TH — Country

CASE-20260829-9856 MEDIUM OPEN Assignee: unassigned · Opened 1d ago

Opened from country TH

🔄 Pivot:🌎 TH📁 country

Entities

37
linked to case

IoCs

30
indicators

Entity types

3
dimensions

Evidence events

3
chain of custody

➕ Add anything to this case

Attach any entity — region, country, APT, source, MITRE technique, IoC, nation-state, campaign, data point, mission domain, CVE, malware, ransomware — and all linked entities are pulled in automatically.

🔎 IoC (30)

IndicatorRoleSource
203.150.171.19indicatorpivotsearch · workbench
223.204.247.179indicatorpivotsearch · workbench
223.24.93.26indicatorpivotsearch · workbench
103.13.212.143indicatorpivotsearch · workbench
101.109.221.118indicatorpivotsearch · workbench
1.1.220.10indicatorpivotsearch · workbench
110.169.28.47indicatorpivotsearch · workbench
45.252.54.177indicatorpivotsearch · workbench
110.77.250.185indicatorpivotsearch · workbench
183.88.244.87indicatorpivotsearch · workbench
203.114.108.46indicatorpivotsearch · workbench
202.52.4.151indicatorpivotsearch · workbench
223.206.243.39indicatorpivotsearch · workbench
1.20.103.235indicatorpivotsearch · workbench
1.20.96.158indicatorpivotsearch · workbench
1.20.96.142indicatorpivotsearch · workbench
1.10.216.165indicatorpivotsearch · workbench
1.4.195.114indicatorpivotsearch · workbench
118.27.150.126indicatorpivotsearch · workbench
49.49.60.32indicatorpivotsearch · workbench
1.4.221.22indicatorpivotsearch · workbench
1.2.220.216indicatorpivotsearch · workbench
1.2.220.42indicatorpivotsearch · workbench
1.2.210.137indicatorpivotsearch · workbench
1.1.220.100indicatorpivotsearch · workbench
1.1.189.58indicatorpivotsearch · workbench
1.1.168.63indicatorpivotsearch · workbench
1.0.249.212indicatorpivotsearch · workbench
1.0.245.244indicatorpivotsearch · workbench
1.0.171.213indicatorpivotsearch · workbench

🔒 Ransomware (6)

PanzerqilinincransomkrybitDYSPHOR1Amedusalocker

🌎 Country (1)

TH

🤖 Case Operations

AI Copilot brief AI Skills Skills Library Playbooks Playbook Library Workstations Automations Correlation graph Data Points Sources Export STIX/MISP Evidence report Watchlist Report

📜 Chain of Evidence (tamper-evident, hash-chained)

WhenActorActionEntitySourceHash
2026-08-29 19:00:37analystexpandcountry: THgraph+live · 36 linked entities pulled3e1ef22b7
2026-08-29 19:00:32analystaddcountry: THmanual · primary26549d7ea9
2026-08-29 19:00:32analystopencountry: THanalyst · case created9bb90e3d13

Each record's hash chains to the previous, so any tampering is detectable. Export the full trail via the Evidence report.

📝 Case Notes (0)

← All Cases
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Escalate from triage

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Legal & LEPlaybooksReports