Platform Health
75%
6/8 checks
Capabilities
39
100% present of 79
Pages on disk
219
139 in nav · 71 support
Unwired pages
9
not in sidebar
Indicators
953.2K
14 types
Enrichment
0%
15 covered
⚠ Implemented but not wired into the sidebar (9)
These pages exist on disk but no nav entry links to them — the exact drift this page exists to catch. Add them to includes/header.php $navGroups.
🧩 Capability Matrix — Index of Everything
● Covered (UI+data) 39
● Partial (UI, no data) 40
● Backend only 0
● Gap 0
Core IoC & Infrastructure
| ASN / Autonomous System | Partial | open → |
| IP Address | Covered | open → |
| CIDR / Netblock | Partial | open → |
| Domain | Covered | open → |
| Subdomain (CT logs) | Partial | open → |
| URL | Covered | open → |
| Registrar | Partial | open → |
| DNS (live) | Covered | open → |
| Historic / Passive DNS | Covered | open → |
| WHOIS | Partial | open → |
| Reverse DNS | Covered | open → |
| Geolocation | Covered | open → |
| NetFlow / Traffic | Partial | open → |
| File Hash / Sample | Covered | open → |
| Malware Family | Partial | open → |
| Sandbox Detonation | Partial | open → |
| Reputation Scoring | Partial | open → |
| Partial | open → | |
| Phone | Covered | open → |
| Breach / Exposure | Partial | open → |
| Cryptocurrency / Blockchain | Covered | open → |
| CVE / Vulnerability | Covered | open → |
| Onion / Dark Web | Covered | open → |
Intelligence Disciplines
| OSINT | Covered | open → |
| GEOINT | Partial | open → |
| FININT (financial) | Covered | open → |
| CYBINT | Covered | open → |
| TECHINT (infrastructure) | Partial | open → |
| SIGINT (traffic/telemetry) | Covered | open → |
| SOCMINT (social media) | Partial | open → |
| HUMINT (source register) | Partial | open → |
| All-Source / AIS sharing | Partial | open → |
Mission Domains
| Cyber Threat | Covered | open → |
| Nation-State / APT | Covered | open → |
| Ransomware | Covered | open → |
| Organized Crime | Partial | open → |
| Sanctions / OFAC | Covered | open → |
| Wanted / Rewards | Partial | open → |
| Phishing | Covered | open → |
| Vulnerability Mgmt | Covered | open → |
| Fraud / Crypto Fraud | Covered | open → |
| Government / Media (sectors) | Partial | open → |
| Country Registry (ISO 3166) | Partial | open → |
| Country Risk Scoring | Partial | open → |
| Geopolitical | Partial | open → |
| Human Trafficking | Partial | open → |
| Human Rights | Partial | open → |
| Homelessness / Vulnerable Pops | Partial | open → |
| Mis/Disinformation | Partial | open → |
Operational Capabilities
| Bulk Analysis | Partial | open → |
| Worst Offenders | Partial | open → |
| Jurisdictional Triage | Partial | open → |
| Takedown / Abuse | Partial | open → |
| Legal / LE Referral | Partial | open → |
| Case Management | Partial | open → |
| Campaigns | Covered | open → |
| Alerting | Partial | open → |
| Playbooks | Partial | open → |
| Reporting | Partial | open → |
| Watchlists | Partial | open → |
| Whitelist / False-Pos | Partial | open → |
| Tagging / Labels | Covered | open → |
| Saved Searches | Partial | open → |
| Cyber Fusion Center | Covered | open → |
| Information Sharing | Covered | open → |
Automation
| Auto-Collect | Covered | open → |
| Feed Sync | Covered | open → |
| Enrichment Runner | Covered | open → |
| Cron Pipeline | Covered | open → |
| Seed / Watch | Covered | open → |
| File Ingest | Partial | open → |
| DNS Audit Automation | Covered | open → |
Sharing, Export & Integrations
| STIX / MISP Export | Covered | open → |
| TAXII 2.1 Server | Covered | open → |
| MISP / RSS Feed | Covered | open → |
| Detection Rules (YARA/Sigma/Snort) | Partial | open → |
| REST API | Covered | open → |
| Datasets Hub | Covered | open → |
| Integrations / API Keys | Covered | open → |
🔧 System Health
| Database | connected |
| PHP | 8.3.31 |
| ext/pdo_mysql | loaded |
| ext/curl | loaded |
| ext/openssl | loaded |
| ext/mbstring | loaded |
| ext/json | loaded |
| ext/zip | loaded |
| ext/dom | loaded |
| ext/fileinfo | loaded |
| dir/cache | writable |
| dir/uploads | missing |
| dir/feeds | missing |
| dir/backups | missing |
⚡ Automation & Jobs
| Feed registry | 435 active / 435 |
| Auto-Collect | 2026-08-06 13:14:13 |
| Enrichment | 2026-08-06 13:08:06 |
| DNS Audit | 2026-08-06 13:08:01 |
| Statistics | never |
| Data freshness | 0d since newest |
🔌 Integrations (0/12)
AlienVault OTXVirusTotalShodanAbuseIPDBGreyNoiseWhoisXMLHaveIBeenPwnedCensysurlscan.ioipdataipinfoMaxMind
📊 Ingestion & Enrichment Breakdown
Indicators by type
ip440K
domain347.8K
url93.3K
hash_sha25620.1K
cidr13.8K
bitcoin13.1K
hash_sha111.5K
ethereum5.7K
cve3.7K
hash_md53.3K
onion753
asn206
monero10
phone4
Enrichment by type
ipinfo15
🗺 Local Resolution Coverage
Country (geo)
0%
0 / 440K IPs
ASN
0%
0 / 440K IPs
Local datasets
netblock: 0
geo: 0
geo: 0
last run: never
🗃 Database Schema (31 tables, auto-discovered)
| Table | Approx. rows |
|---|---|
activity_log | 60 |
alerts | 0 |
api_keys | 1 |
attack_groups | 176 |
attack_software | 825 |
attack_techniques | 697 |
campaigns | 23 |
detection_rules | 0 |
dns_records | 14 |
enrichments | 15 |
entity_links | 17.2K |
feed_registry | 435 |
indicators | 950.4K |
indicator_sources | 1.7M |
indicator_tags | 0 |
ingest_queue | 0 |
job_runs | 0 |
kv_cache | 20 |
legal_requests | 0 |
net_log | 460 |
platform_log | 121 |
ransomware_victims | 100 |
sanctions | 20 |
saved_searches | 0 |
settings | 2 |
sources | 247 |
statistics | 0 |
tags | 14 |
watchlists | 0 |
watchlist_items | 0 |
website_tech | 0 |
📄 Full Page Index (219, auto-discovered)
Every .php on disk. nav linked in sidebar · support backend/script · unwired UI not in nav.
actor-profile.php
add-to-case.php
admin.php
agencies.php
ai-skills.php
ais.php
alerts.php
analytics.php
api-config.php
api-docs.php
api.php
asn-analysis.php
asn-dossier.php
asn-profile.php
blockchain.php
bulk-takedown.php
campaign.php
cases.php
category.php
cleanup-indicators.php
collect.php
config-check.php
config.php
contact-detail.php
contacts.php
control.php
copilot.php
correlate.php
countries.php
country-dashboard.php
country-intel.php
country-risk.php
country.php
coverage.php
cron.php
datapoint.php
datapoints.php
datasets.php
debug-feeds.php
detection-rules.php
diagnose.php
diagnostic.php
discipline.php
disciplines.php
disinformation.php
dns-audit.php
dns-intel.php
docs.php
domain.php
downloads.php
email-profile.php
enrich-attribution.php
enrich-epss.php
enrich-local.php
enrich-run.php
enrich-scout.php
enrich.php
enrichments.php
entity.php
explore.php
export.php
feeds.php
fetch-ipdata.php
financial-crime.php
fusion-links.php
fusion.php
gap-taxonomy.php
gdelt.php
generate-rules.php
geopolitical.php
hash-profile.php
human-rights.php
human-trafficking.php
humint.php
hunting.php
import-ipdata.php
import-malwarebazaar.php
import.php
index.php
infra-lookup.php
ingest-country-metrics.php
ingest-files.php
ingest.php
install-country-intel.php
install.php
integrations.php
ioc-type.php
ioc-workbench.php
ioc.php
ip-datasets.php
ip-profile.php
isp-list-data.php
isp-list.php
le-contacts.php
le-provider-data.php
le-provider-details.php
legal.php
link-analysis.php
load-iptoasn.php
log-stream.php
matrix.php
misp-feed.php
mission-command.php
ncmec-esp-2024-data.php
ncmec-esp-data.php
ncmec-esp.php
netflow.php
ops.php
org-profile.php
organized-crime.php
osint.php
passive-dns.php
pf-gap.php
pf.php
phishing-center.php
phone-profile.php
pipeline.php
pivot.php
platforms.php
playbook-library.php
playbooks.php
push-intel.php
ransomware.php
reclassify-types.php
reference-lists-data.php
reports.php
resolve-all.php
resolve-asn-abuse.php
resolve-asn-intel.php
resolve-dns.php
resolve-domains.php
resolve-enrich.php
resolve-everything.php
resolve-fast.php
resolve-hashes.php
resolve-ip-intel.php
resolve-links.php
resolve-local.php
resolve-repair.php
resolve-tags.php
rollup-iocs.php
run-fusion.php
sanctions.php
saved-searches.php
scout-test.php
search.php
sectors.php
seed-asn-abuse-offline.php
seed-attack.php
seed-campaigns.php
seed-catalog-deep.php
seed-catalog-gaps.php
seed-catalog-taxonomy.php
seed-catalog.php
seed-countries.php
seed-country-intel.php
seed-crypto-intel.php
seed-disciplines.php
seed-domain-drugs.php
seed-domains.php
seed-feeds-mega.php
seed-fintel-sources.php
seed-human-security.php
seed-kev.php
seed-narratives.php
seed-ransomware-intel.php
seed-reference-v6.php
seed-sanctions.php
seed-saved-searches.php
seed-sources-plus.php
seed-sources-v2.php
seed-tip.php
seed-watch.php
seed-watchlists.php
seed-worldmap.php
sharing.php
skills-library.php
snapshot-risk.php
socmint.php
source-catalog.php
source-groups.php
source-profile.php
source.php
sources.php
strategy.php
sync-intel.php
sync-registry.php
system-check.php
tag-feeds.php
tags.php
takedown.php
taxii2.php
theater.php
threat-dashboard.php
threat-resources-data.php
threats.php
timeline.php
triage.php
upgrade-db-ipdata.php
upgrade-db-v10.php
upgrade-db-v11.php
upgrade-db-v12.php
upgrade-db-v3.php
upgrade-db-v4.php
upgrade-db-v5.php
upgrade-db-v6.php
upgrade-db-v7.php
upgrade-db-v8.php
upgrade-db-v9.php
upgrade-db.php
url-profile.php
vuln-map.php
vulnerable-populations.php
wanted.php
watchlist.php
website-audit.php
whitelist.php
workstations.php
worst-offenders.php
This diagnostic is self-discovering: it globs the filesystem, parses the live sidebar nav, introspects the database schema, and re-evaluates the capability matrix on every load. Add a page or a table and it appears here automatically; the capability rows and "unwired pages" list are the drift alarms.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron