Case Management

ransomware (KEV-flagged) — Malware

CASE-20260821-5694 MEDIUM OPEN Assignee: unassigned · Opened 16h ago

Opened from malware ransomware (KEV-flagged)

🔄 Pivot:📁 malware🦠 ransomware (KEV-flagged)

Entities

341
linked to case

IoCs

300
indicators

Entity types

3
dimensions

Evidence events

3
chain of custody

➕ Add anything to this case

Attach any entity — region, country, APT, source, MITRE technique, IoC, nation-state, campaign, data point, mission domain, CVE, malware, ransomware — and all linked entities are pulled in automatically.

🔎 IoC (300)

IndicatorRoleSource
CVE-2022-47986indicatorpivotsearch · workbench
CVE-2022-36537indicatorpivotsearch · workbench
CVE-2023-24880indicatorpivotsearch · workbench
CVE-2017-7494indicatorpivotsearch · workbench
CVE-2019-1388indicatorpivotsearch · workbench
CVE-2021-27878indicatorpivotsearch · workbench
CVE-2021-27877indicatorpivotsearch · workbench
CVE-2021-27876indicatorpivotsearch · workbench
CVE-2023-28252indicatorpivotsearch · workbench
CVE-2023-27997indicatorpivotsearch · workbench
CVE-2022-31199indicatorpivotsearch · workbench
CVE-2023-36884indicatorpivotsearch · workbench
CVE-2023-35078indicatorpivotsearch · workbench
CVE-2023-27532indicatorpivotsearch · workbench
CVE-2023-38035indicatorpivotsearch · workbench
CVE-2021-3129indicatorpivotsearch · workbench
CVE-2017-6884indicatorpivotsearch · workbench
CVE-2023-42793indicatorpivotsearch · workbench
CVE-2023-40044indicatorpivotsearch · workbench
CVE-2023-46747indicatorpivotsearch · workbench
CVE-2023-22518indicatorpivotsearch · workbench
CVE-2023-47246indicatorpivotsearch · workbench
CVE-2023-41265indicatorpivotsearch · workbench
CVE-2023-41266indicatorpivotsearch · workbench
CVE-2023-38203indicatorpivotsearch · workbench
CVE-2023-29300indicatorpivotsearch · workbench
CVE-2023-29357indicatorpivotsearch · workbench
CVE-2023-35082indicatorpivotsearch · workbench
CVE-2023-22527indicatorpivotsearch · workbench
CVE-2024-21887indicatorpivotsearch · workbench
CVE-2023-46805indicatorpivotsearch · workbench
CVE-2024-21893indicatorpivotsearch · workbench
CVE-2020-3259indicatorpivotsearch · workbench
CVE-2024-21338indicatorpivotsearch · workbench
CVE-2023-48788indicatorpivotsearch · workbench
CVE-2021-44529indicatorpivotsearch · workbench
CVE-2023-24955indicatorpivotsearch · workbench
CVE-2023-38831indicatorpivotsearch · workbench
CVE-2024-30051indicatorpivotsearch · workbench
CVE-2023-43208indicatorpivotsearch · workbench
CVE-2024-24919indicatorpivotsearch · workbench
CVE-2024-1086indicatorpivotsearch · workbench
CVE-2024-26169indicatorpivotsearch · workbench
CVE-2024-23692indicatorpivotsearch · workbench
CVE-2024-23897indicatorpivotsearch · workbench
CVE-2017-1000253indicatorpivotsearch · workbench
CVE-2024-40766indicatorpivotsearch · workbench
CVE-2024-6670indicatorpivotsearch · workbench
CVE-2020-0618indicatorpivotsearch · workbench
CVE-2024-30088indicatorpivotsearch · workbench
CVE-2024-9680indicatorpivotsearch · workbench
CVE-2024-38094indicatorpivotsearch · workbench
CVE-2024-51567indicatorpivotsearch · workbench
CVE-2024-49039indicatorpivotsearch · workbench
CVE-2024-0012indicatorpivotsearch · workbench
CVE-2024-9474indicatorpivotsearch · workbench
CVE-2023-28461indicatorpivotsearch · workbench
CVE-2024-11667indicatorpivotsearch · workbench
CVE-2024-51378indicatorpivotsearch · workbench
CVE-2024-50623indicatorpivotsearch · workbench
CVE-2024-55956indicatorpivotsearch · workbench
CVE-2024-41713indicatorpivotsearch · workbench
CVE-2024-55550indicatorpivotsearch · workbench
CVE-2023-48365indicatorpivotsearch · workbench
CVE-2025-23006indicatorpivotsearch · workbench
CVE-2020-29574indicatorpivotsearch · workbench
CVE-2024-57727indicatorpivotsearch · workbench
CVE-2024-53704indicatorpivotsearch · workbench
CVE-2018-8639indicatorpivotsearch · workbench
CVE-2025-22225indicatorpivotsearch · workbench
CVE-2025-26633indicatorpivotsearch · workbench
CVE-2025-24472indicatorpivotsearch · workbench
CVE-2025-31161indicatorpivotsearch · workbench
CVE-2025-29824indicatorpivotsearch · workbench
CVE-2025-31324indicatorpivotsearch · workbench
CVE-2025-3248indicatorpivotsearch · workbench
CVE-2025-42999indicatorpivotsearch · workbench
CVE-2019-6693indicatorpivotsearch · workbench
CVE-2025-5777indicatorpivotsearch · workbench
CVE-2025-8088indicatorpivotsearch · workbench
CVE-2025-10035indicatorpivotsearch · workbench
CVE-2025-61882indicatorpivotsearch · workbench
CVE-2025-61884indicatorpivotsearch · workbench
CVE-2025-55182indicatorpivotsearch · workbench
CVE-2026-23760indicatorpivotsearch · workbench
CVE-2025-52691indicatorpivotsearch · workbench
CVE-2026-24423indicatorpivotsearch · workbench
CVE-2026-1731indicatorpivotsearch · workbench
CVE-2025-26399indicatorpivotsearch · workbench
CVE-2026-20131indicatorpivotsearch · workbench
CVE-2023-21529indicatorpivotsearch · workbench
CVE-2025-60710indicatorpivotsearch · workbench
cve-2024-27198indicatorpivotsearch · workbench
CVE-2024-27199indicatorpivotsearch · workbench
CVE-2023-27351indicatorpivotsearch · workbench
CVE-2026-33825indicatorpivotsearch · workbench
CVE-2024-57726indicatorpivotsearch · workbench
CVE-2024-57728indicatorpivotsearch · workbench
CVE-2024-1708indicatorpivotsearch · workbench
CVE-2026-41940indicatorpivotsearch · workbench
CVE-2026-45321indicatorpivotsearch · workbench
CVE-2026-48027indicatorpivotsearch · workbench
CVE-2026-0257indicatorpivotsearch · workbench
CVE-2026-50751indicatorpivotsearch · workbench
CVE-2026-35273indicatorpivotsearch · workbench
CVE-2026-12569indicatorpivotsearch · workbench
CVE-2026-45659indicatorpivotsearch · workbench
CVE-2026-15410indicatorpivotsearch · workbench
CVE-2021-42287indicatorpivotsearch · workbench
CVE-2018-20753indicatorpivotsearch · workbench
CVE-2018-7602indicatorpivotsearch · workbench
CVE-2022-24521indicatorpivotsearch · workbench
CVE-2022-22954indicatorpivotsearch · workbench
CVE-2019-16057indicatorpivotsearch · workbench
CVE-2018-6882indicatorpivotsearch · workbench
CVE-2022-29464indicatorpivotsearch · workbench
CVE-2019-1130indicatorpivotsearch · workbench
CVE-2019-1385indicatorpivotsearch · workbench
CVE-2020-0638indicatorpivotsearch · workbench
CVE-2016-3351indicatorpivotsearch · workbench
CVE-2017-18362indicatorpivotsearch · workbench
CVE-2017-0147indicatorpivotsearch · workbench
CVE-2018-19943indicatorpivotsearch · workbench
CVE-2018-19949indicatorpivotsearch · workbench
CVE-2018-19953indicatorpivotsearch · workbench
CVE-2010-0738indicatorpivotsearch · workbench
CVE-2010-1428indicatorpivotsearch · workbench
CVE-2012-1710indicatorpivotsearch · workbench
CVE-2013-0074indicatorpivotsearch · workbench
CVE-2013-0422indicatorpivotsearch · workbench
CVE-2013-0431indicatorpivotsearch · workbench
CVE-2013-3993indicatorpivotsearch · workbench
CVE-2016-0034indicatorpivotsearch · workbench
CVE-2019-7192indicatorpivotsearch · workbench
CVE-2019-7193indicatorpivotsearch · workbench
CVE-2019-7194indicatorpivotsearch · workbench
CVE-2019-7195indicatorpivotsearch · workbench
CVE-2021-4034indicatorpivotsearch · workbench
CVE-2022-29499indicatorpivotsearch · workbench
CVE-2022-27924indicatorpivotsearch · workbench
CVE-2022-30333indicatorpivotsearch · workbench
CVE-2022-37042indicatorpivotsearch · workbench
CVE-2022-27925indicatorpivotsearch · workbench
CVE-2022-2294indicatorpivotsearch · workbench
CVE-2022-26352indicatorpivotsearch · workbench
CVE-2018-13374indicatorpivotsearch · workbench
CVE-2018-6530indicatorpivotsearch · workbench
CVE-2022-27593indicatorpivotsearch · workbench
CVE-2022-40684indicatorpivotsearch · workbench
CVE-2018-19320indicatorpivotsearch · workbench
CVE-2018-19321indicatorpivotsearch · workbench
CVE-2018-19322indicatorpivotsearch · workbench
CVE-2018-19323indicatorpivotsearch · workbench
CVE-2020-3153indicatorpivotsearch · workbench
CVE-2020-3433indicatorpivotsearch · workbench
CVE-2022-41073indicatorpivotsearch · workbench
CVE-2022-41091indicatorpivotsearch · workbench
CVE-2022-26501indicatorpivotsearch · workbench
CVE-2022-26500indicatorpivotsearch · workbench
CVE-2022-44698indicatorpivotsearch · workbench
CVE-2022-41080indicatorpivotsearch · workbench
CVE-2022-47966indicatorpivotsearch · workbench
CVE-2017-11357indicatorpivotsearch · workbench
CVE-2022-21587indicatorpivotsearch · workbench
CVE-2022-24990indicatorpivotsearch · workbench
CVE-2015-2291indicatorpivotsearch · workbench
CVE-2023-23376indicatorpivotsearch · workbench
CVE-2022-40765indicatorpivotsearch · workbench
CVE-2022-41223indicatorpivotsearch · workbench
CVE-2021-40539indicatorpivotsearch · workbench
CVE-2021-21985indicatorpivotsearch · workbench
CVE-2021-21972indicatorpivotsearch · workbench
CVE-2021-22005indicatorpivotsearch · workbench
CVE-2020-3992indicatorpivotsearch · workbench
CVE-2019-5544indicatorpivotsearch · workbench
CVE-2020-12271indicatorpivotsearch · workbench
CVE-2021-20016indicatorpivotsearch · workbench
CVE-2019-7481indicatorpivotsearch · workbench
CVE-2021-20023indicatorpivotsearch · workbench
CVE-2021-20022indicatorpivotsearch · workbench
CVE-2021-20021indicatorpivotsearch · workbench
CVE-2021-35211indicatorpivotsearch · workbench
CVE-2018-2380indicatorpivotsearch · workbench
CVE-2019-11539indicatorpivotsearch · workbench
CVE-2021-22893indicatorpivotsearch · workbench
CVE-2019-18935indicatorpivotsearch · workbench
CVE-2021-36955indicatorpivotsearch · workbench
CVE-2021-26857indicatorpivotsearch · workbench
CVE-2019-0604indicatorpivotsearch · workbench
CVE-2021-26858indicatorpivotsearch · workbench
CVE-2020-0968indicatorpivotsearch · workbench
CVE-2019-1367indicatorpivotsearch · workbench
CVE-2018-0802indicatorpivotsearch · workbench
CVE-2019-1215indicatorpivotsearch · workbench
CVE-2021-36942indicatorpivotsearch · workbench
CVE-2021-26411indicatorpivotsearch · workbench
CVE-2019-0803indicatorpivotsearch · workbench
CVE-2021-1732indicatorpivotsearch · workbench
CVE-2017-0143indicatorpivotsearch · workbench
CVE-2020-0688indicatorpivotsearch · workbench
CVE-2020-0878indicatorpivotsearch · workbench
CVE-2016-0167indicatorpivotsearch · workbench
CVE-2021-38647indicatorpivotsearch · workbench
CVE-2014-1812indicatorpivotsearch · workbench
CVE-2021-30116indicatorpivotsearch · workbench
CVE-2020-12812indicatorpivotsearch · workbench
CVE-2019-5591indicatorpivotsearch · workbench
CVE-2021-35464indicatorpivotsearch · workbench
CVE-2021-22986indicatorpivotsearch · workbench
CVE-2020-5902indicatorpivotsearch · workbench
CVE-2018-6789indicatorpivotsearch · workbench
CVE-2021-22205indicatorpivotsearch · workbench
CVE-2018-7600indicatorpivotsearch · workbench
CVE-2017-9822indicatorpivotsearch · workbench
CVE-2019-11634indicatorpivotsearch · workbench
CVE-2019-13608indicatorpivotsearch · workbench
CVE-2020-3580indicatorpivotsearch · workbench
CVE-2021-42258indicatorpivotsearch · workbench
CVE-2019-3396indicatorpivotsearch · workbench
CVE-2019-11580indicatorpivotsearch · workbench
CVE-2021-26084indicatorpivotsearch · workbench
CVE-2021-41773indicatorpivotsearch · workbench
CVE-2021-42013indicatorpivotsearch · workbench
CVE-2018-4878indicatorpivotsearch · workbench
CVE-2021-27103indicatorpivotsearch · workbench
CVE-2021-27101indicatorpivotsearch · workbench
CVE-2021-27102indicatorpivotsearch · workbench
CVE-2021-27104indicatorpivotsearch · workbench
CVE-2021-42321indicatorpivotsearch · workbench
CVE-2021-40449indicatorpivotsearch · workbench
CVE-2021-40438indicatorpivotsearch · workbench
CVE-2017-12149indicatorpivotsearch · workbench
CVE-2021-43890indicatorpivotsearch · workbench
CVE-2019-1579indicatorpivotsearch · workbench
CVE-2018-13383indicatorpivotsearch · workbench
CVE-2018-13382indicatorpivotsearch · workbench
CVE-2019-2725indicatorpivotsearch · workbench
CVE-2019-1458indicatorpivotsearch · workbench
CVE-2021-21975indicatorpivotsearch · workbench
CVE-2018-8453indicatorpivotsearch · workbench
CVE-2020-0787indicatorpivotsearch · workbench
CVE-2021-20038indicatorpivotsearch · workbench
CVE-2022-21882indicatorpivotsearch · workbench
CVE-2017-10271indicatorpivotsearch · workbench
CVE-2018-15982indicatorpivotsearch · workbench
CVE-2018-20250indicatorpivotsearch · workbench
CVE-2018-8174indicatorpivotsearch · workbench
CVE-2019-0752indicatorpivotsearch · workbench
CVE-2022-24682indicatorpivotsearch · workbench
CVE-2008-2992indicatorpivotsearch · workbench
CVE-2010-0188indicatorpivotsearch · workbench
CVE-2012-0507indicatorpivotsearch · workbench
CVE-2012-1723indicatorpivotsearch · workbench
CVE-2012-4681indicatorpivotsearch · workbench
CVE-2015-1701indicatorpivotsearch · workbench
CVE-2015-7645indicatorpivotsearch · workbench
CVE-2016-0099indicatorpivotsearch · workbench
CVE-2016-1019indicatorpivotsearch · workbench
CVE-2018-8581indicatorpivotsearch · workbench
CVE-2021-41379indicatorpivotsearch · workbench
CVE-2009-3960indicatorpivotsearch · workbench
CVE-2015-2546indicatorpivotsearch · workbench
CVE-2016-3309indicatorpivotsearch · workbench
CVE-2017-0101indicatorpivotsearch · workbench
CVE-2018-8120indicatorpivotsearch · workbench
CVE-2019-0543indicatorpivotsearch · workbench
CVE-2019-0841indicatorpivotsearch · workbench
CVE-2019-1064indicatorpivotsearch · workbench
CVE-2019-1069indicatorpivotsearch · workbench
CVE-2019-1129indicatorpivotsearch · workbench
CVE-2019-1253indicatorpivotsearch · workbench
CVE-2019-1315indicatorpivotsearch · workbench
CVE-2019-1322indicatorpivotsearch · workbench
CVE-2019-1405indicatorpivotsearch · workbench
CVE-2010-2861indicatorpivotsearch · workbench
CVE-2017-0146indicatorpivotsearch · workbench
CVE-2017-12615indicatorpivotsearch · workbench
CVE-2018-11138indicatorpivotsearch · workbench
CVE-2018-1273indicatorpivotsearch · workbench
CVE-2019-11043indicatorpivotsearch · workbench
CVE-2019-15107indicatorpivotsearch · workbench
CVE-2020-2021indicatorpivotsearch · workbench
CVE-2021-22941indicatorpivotsearch · workbench
CVE-2021-42237indicatorpivotsearch · workbench
CVE-2022-21999indicatorpivotsearch · workbench
CVE-2013-2465indicatorpivotsearch · workbench
CVE-2013-2551indicatorpivotsearch · workbench
CVE-2016-0151indicatorpivotsearch · workbench
CVE-2016-0189indicatorpivotsearch · workbench
CVE-2017-0213indicatorpivotsearch · workbench
CVE-2018-8405indicatorpivotsearch · workbench
CVE-2018-8406indicatorpivotsearch · workbench
CVE-2018-8440indicatorpivotsearch · workbench
CVE-2021-20028indicatorpivotsearch · workbench
CVE-2021-26085indicatorpivotsearch · workbench
CVE-2021-38646indicatorpivotsearch · workbench
CVE-2018-10562indicatorpivotsearch · workbench
CVE-2021-28799indicatorpivotsearch · workbench
CVE-2017-0148indicatorpivotsearch · workbench
CVE-2021-42278indicatorpivotsearch · workbench

🦠 Malware (1)

ransomware (KEV-flagged)

🛡 Vulnerability / CVE (40)

CVE-2008-2992CVE-2009-3960CVE-2010-0188CVE-2010-0738CVE-2010-1428CVE-2010-2861CVE-2012-0507CVE-2012-1710CVE-2012-1723CVE-2012-4681CVE-2013-0074CVE-2013-0422CVE-2013-0431CVE-2013-2465CVE-2013-2551CVE-2013-3993CVE-2014-1812CVE-2015-1701CVE-2015-2291CVE-2015-2546CVE-2015-7645CVE-2016-0034CVE-2016-0099CVE-2016-0151CVE-2016-0167CVE-2016-0189CVE-2016-1019CVE-2016-3309CVE-2016-3351CVE-2017-0101CVE-2017-0143CVE-2017-0146CVE-2017-0147CVE-2017-0148CVE-2017-0199CVE-2017-0213CVE-2017-1000253CVE-2017-10271CVE-2017-11357CVE-2017-12149

🤖 Case Operations

AI Copilot brief AI Skills Skills Library Playbooks Playbook Library Workstations Automations Correlation graph Data Points Sources Export STIX/MISP Evidence report Watchlist Report

📜 Chain of Evidence (tamper-evident, hash-chained)

WhenActorActionEntitySourceHash
2026-08-21 06:31:15analystexpandmalware: ransomware (KEV-flagged)graph+live · 340 linked entities pull20fc1f90ad
2026-08-21 06:31:14analystaddmalware: ransomware (KEV-flagged)manual · primary56986b9fe0
2026-08-21 06:31:14analystopenmalware: ransomware (KEV-flagged)analyst · case created3d3247bb43

Each record's hash chains to the previous, so any tampering is detectable. Export the full trail via the Evidence report.

📝 Case Notes (0)

← All Cases
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Escalate from triage

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Legal & LEPlaybooksReports