KR — Country
CASE-20260821-8935
MEDIUM
OPEN
Assignee: unassigned · Opened 7h ago
Opened from country KR
Entities
19
linked to case
IoCs
13
indicators
Entity types
4
dimensions
Evidence events
3
chain of custody
➕ Add anything to this case
Attach any entity — region, country, APT, source, MITRE technique, IoC, nation-state, campaign, data point, mission domain, CVE, malware, ransomware — and all linked entities are pulled in automatically.
🔎 IoC (13)
| Indicator | Role | Source | |
|---|---|---|---|
220.117.253.204 | indicator | pivot | search · workbench |
218.149.228.146 | indicator | pivot | search · workbench |
218.149.228.145 | indicator | pivot | search · workbench |
218.149.228.143 | indicator | pivot | search · workbench |
14.128.136.68 | indicator | pivot | search · workbench |
115.126.247.49 | indicator | pivot | search · workbench |
221.145.215.35 | indicator | pivot | search · workbench |
220.116.26.179 | indicator | pivot | search · workbench |
218.149.228.163 | indicator | pivot | search · workbench |
218.149.228.156 | indicator | pivot | search · workbench |
218.149.228.155 | indicator | pivot | search · workbench |
218.149.228.147 | indicator | pivot | search · workbench |
218.149.228.140 | indicator | pivot | search · workbench |
🏹 Actor / APT (1)
🌎 Country (1)
🤖 Case Operations
📜 Chain of Evidence (tamper-evident, hash-chained)
| When | Actor | Action | Entity | Source | Hash |
|---|---|---|---|---|---|
| 2026-08-21 04:03:32 | analyst | expand | country: KR | graph+live · 18 linked entities pulle | e76fb27794 |
| 2026-08-21 04:03:30 | analyst | add | country: KR | manual · primary | 9810405601 |
| 2026-08-21 04:03:30 | analyst | open | country: KR | analyst · case created | dbbf819ed7 |
Each record's hash chains to the previous, so any tampering is detectable. Export the full trail via the Evidence report.
📝 Case Notes (0)
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Attach all related IoCs as artifacts
- Run a response playbook per case type
- Escalate to legal when needed