📕 Getting Started
- Run the DB upgrades in order:
upgrade-db.php→ v3 → v4 → v5 → v6 → v7 → v8. - Seed reference data: countries, sources, world borders.
- Ingest: Auto-Collect or Import.
- Resolve locally: Resolve Everything.
- Automate: schedule
cron.php(collect→ingest→resolve→enrich→score→alert). - Operate: Platforms Hub, Copilot, AI Skills.
📚 Tradecraft Glossary
OSINT — Open-source intelligence
GEOINT — Geospatial intelligence
SIGINT — Signals intelligence
HUMINT — Human intelligence
FININT — Financial intelligence
SOCMINT — Social-media intelligence
TECHINT — Technical intelligence
AIS — Automated Indicator Sharing (CISA)
STIX — Structured Threat Info Expression
TAXII — CTI transport protocol
IoC — Indicator of Compromise
TTP — Tactics, Techniques & Procedures
APT — Advanced Persistent Threat
🔌 Source Catalog
IP Blocklists (323) IP Reputation (23) APT/IoC (16) Phishing (14) Sanctions (13) OSINT (10) C2 Attribution (9) Catalog: Open data portal (9) Reputation (8) Catalog: vendor advisories (7) Domains/URLs (7) Catalog: Health statistics (6) Malware Hashes (6) Catalog: gov-weather (6) Vulnerabilities (6) CERT Advisories (6) Vulnerability (6) Catalog: Procurement (5) Catalog: registry (5) Catalog: Sanctions & PEP (5) Catalog: Corporate Registry (5) Crypto (5) Catalog: ADS-B / Flight Tracking (5) Catalog: blockchain-explorer (5) Catalog: Seismic / earthquakes (5) Malware (5) Advisory (5) Catalog: Software supply chain (5) TECHINT (5) Catalog: News Aggregator/RSS (5) Catalog: OSV (5) Catalog: Ransomware Tracker (5) Catalog: econ-data (4) Catalog: vuln (4) C2 (4) Catalog: Tor Network Data (4) Catalog: Weather & storm alerts (4) Malware URLs (4) Catalog: Legislation (4) Ransomware (4) Catalog: CVE/NVD (4) Wanted (4) DNS (4) Catalog: Pathogen genomics (4) Catalog: APT (4) Cryptocurrency (4) Catalog: threat-feed (4) Geopolitical (4) Catalog: crypto-analytics (4) Tor (3) Catalog: bgp-asn (3) Catalog: breach (3) Catalog: Aircraft Database (3) Malware Attribution (3) Catalog: sec-filings (3) Catalog: Trade statistics (3) Catalog: Geocoding (3) FININT: Sanctions (3) Catalog: Court records (3) Catalog: forecast-api (3) ASN (3) Catalog: Disease surveillance (3) Framework (3) Catalog: Orbital / Ephemeris (3) Catalog: Critical Infrastructure (3) Catalog: exploit DBs (3) Catalog: Maps & Vector Data (3) Catalog: ct-logs (3) Catalog: dns (3) Catalog: Elevation / DEM (3) Malware Domains (3) Catalog: Land/property registry (3) Scam (3) Catalog: Risk Analysis (3) Catalog: Conflict & Humanitarian (3) Crypto Sanctions (2) Disinformation (2) Maritime (2) Ransomware Actors (2) Adverse Media (2) Catalog: Operational Security (2) Catalog: RF Tracking / Telemetry (2) Catalog: CWE (2) Catalog: framework (2) Catalog: Leak Aggregator (2) Proxy/Anon (2) Catalog: passive-dns (2) Catalog: blocklist (2) Catalog: Displacement & refugees (2) Catalog: KEV (2) Catalog: Logistics (2) Catalog: market-data (2) C2 Certificates (2) Catalog: astronomy (2) Catalog: Research data repository (2) Catalog: Callsigns / Network Feed (2) Catalog: Satellite Imagery (2) Catalog: Volcanoes (2) Breach (2) Catalog: Sanctions (2) Corporate Registry (2) Crypto: Crypto Phishing (2) Catalog: Government open data (2) Governance (2) Malware Families (2) Catalog: Launches (2) Scanning (2) Catalog: rdap-whois (2) Catalog: Research grants/funding (2) Catalog: CORPINT (2) Catalog: Nation State (2) Catalog: c2-tracker (2) Catalog: satellite (2) Catalog: Democracy Dataset (2) Catalog: Drug reference (2) Court Cases (2) Catalog: Gazette (2) Catalog: Mining & Resource Crime (2) Catalog: banking-codes (2) Catalog: Academic (2) Catalog: Biomedical literature (2) Catalog: CERTINT (2) Catalog: Satellite RF / Ground Station (2) Catalog: Space weather (2) Catalog: Disaster registry (1) Catalog: tropical (1) Catalog: Environmental Crime (1) Catalog: Fact-Check (1) Catalog: GEOINT (1) FININT: Sanctions/PEP (1) Catalog: ip-geo (1) Catalog: Legislative (1) Catalog: marine-buoy (1) Catalog: Multi-hazard events (1) Catalog: OA book directory (1) Catalog: PATENTINT (1) Catalog: ADS-B / Signals (1) Catalog: alerts (1) Catalog: Clinical trial registry (1) Catalog: Scholarly metadata / DOI registry (1) Catalog: Criminal (1) Catalog: SOCMINT (1) Catalog: Tariffs & HS codes (1) Catalog: Data-literature link index (1) Catalog: DOMINT (1) Catalog: Emerging Tech (1) Counterterrorism (1) Catalog: Event-based intelligence (1) Crypto: Crypto Sanctions (1) FININT: Enforcement (1) Catalog: gravatar (1) Human Security (1) Catalog: Insider Threat (1) Catalog: Maps & Imagery Viewer (1) Sharing (1) Catalog: METOCINT (1) Wildlife Crime (1) Catalog: NETINT (1) Catalog: Open citation index (1) ATT&CK Actors (1) Catalog: ACCTINT (1) Catalog: Population / Geodata (1) Catalog: Reference (1) Catalog: AVINT (1) Catalog: Research org registry (1) Catalog: RISKINT (1) Catalog: Climate & Energy Indicators (1) Catalog: scanning (1) Catalog: SIGINT (1) Catalog: CS bibliography (1) Catalog: SPACEINT (1) Catalog: Threat Analysis (1) Catalog: username (1) Catalog: ELECTINT (1) Catalog: EPSS (1) Crypto: Crypto Attribution (1) Catalog: Food security (1) Geolocation (1) Catalog: Humanitarian coordination (1) Catalog: National Emissions Reporting (1) Catalog: OA location lookup (1) Catalog: OSINT (1) Catalog: people (1) Catalog: Agriculture & Land Emissions (1) Catalog: rankings (1) Catalog: Biological hazards (1) Catalog: Risk (1) Catalog: Company Registry (1) Catalog: CRYPTINT (1) Catalog: Solar PV Assessment (1) Catalog: Dark Web (1) Catalog: Disaster Alert (1) Catalog: Drug/pharmacovigilance (1) Catalog: Emissions Inventory (1) Catalog: Facility & Emissions Registries (1) Dark Web (1) Catalog: Health emergencies (1) Catalog: ioc-feed (1) Catalog: marine (1) Threat Reports (1) Catalog: Multi-hazard alerts (1) Catalog: NEWSINT (1) Catalog: Open scholarly graph (1) Catalog: PASTINT (1) Catalog: Preprint repository (life/med sci) (1) Catalog: AIS open API (1) Catalog: Regional OA literature (1) Catalog: Beneficial Ownership (1) Catalog: RF Licensing / Callsigns (1) Catalog: Boundaries / Geodata (1) Catalog: Climate Indicators (1) Catalog: Scholarly catalog/archive (1) Catalog: Social (1) Catalog: SUPPLYINT (1) Catalog: tides (1) Catalog: Domain (1) Catalog: VEHINT (1) Catalog: email (1) Catalog: European Environment Data (1) FININT: Adverse Media (1) Catalog: Identity (1) Catalog: malware-repo (1) Catalog: MEDINT (1) Catalog: National/regional public health agency (1) Catalog: observations (1) Catalog: Outbreak surveillance (1) Catalog: ACADINT (1) Catalog: phishing (1) Catalog: Aid Transparency (1) Catalog: aviation-weather (1) Catalog: Risk indices (1) Catalog: Chemical database (1) Catalog: Satellite Tracking / TLE (1) Catalog: crypto-scam-db (1) Catalog: space-weather (1) Catalog: Data Repository (1) Catalog: Tsunami alerts (1) Catalog: ECONINT (1) Catalog: Weather & Climate Records (1) Catalog: EPIINT (1) Crypto: Blockchain Explorer (1) Catalog: Floods & hydrology (1) Catalog: geomagnetism (1) Catalog: Human Trafficking (1) Catalog: Japanese science platform (1) Nation State (1) Catalog: LOGINT (1) Catalog: Maritime Piracy (1) Vuln Mapping (1) Catalog: OA journal directory (1) Catalog: Aerial Imagery (1) Catalog: radar (1) Catalog: Research data DOI registry (1) Catalog: Biodiversity Occurrence (1) Catalog: RFINT (1) Catalog: Clinical trials (1) Catalog: Sea Level & Tides (1) Catalog: CYBINT (1) Catalog: TECHINT (1) Catalog: Trade compliance & entities (1) Catalog: Vessel registry (1) Catalog: Emissions & Climate Policy (1) FININT: Legal Entity (1) Catalog: hazard-alerts (1) Human Trafficking (1) Catalog: Investigative Aggregator (1) Malware IPs (1) Catalog: LEGINT (1) Ransom Payments (1) Aviation (1) Catalog: Paste Monitoring (1) Catalog: ACTORINT (1) Catalog: Preprint repository (1) Catalog: Airport Data (1) Catalog: REFINT (1) Catalog: Research project/data platform (1) Catalog: Boundaries (1) Catalog: SANCINT (1) Catalog: Climate data (1) Catalog: Scholarly altmetrics/events (1) Catalog: Counterfeiting (1) Catalog: Signal Propagation / Reception (1) Catalog: Street-Level Imagery (1) Catalog: Vehicle (1) Catalog: EU research graph (1) Crypto: Crypto Fraud (1) Catalog: Forced Labour (1) Environmental (1) Catalog: Governance Index (1) Catalog: Humanitarian funding (1) PEP Screening (1) Catalog: MALINT (1) Catalog: Medical reference (1) Catalog: National OA repository (France) (1) Catalog: OA publisher API (1) Armed Conflict (1) Catalog: PEP/Sanctions (1) Catalog: AI scholarly graph (1) Catalog: Aviation Weather (1) Catalog: Research data/output repository (1) Catalog: securities-registry (1) Catalog: Dark Web Intel (1)
Add more via Seed Sources.
🗃 Data Dictionary (87 tables)
| Table | Approx rows |
|---|---|
activity_log | 111 |
alerts | 1.2K |
alert_rules | 27 |
api_keys | 0 |
api_request_log | 0 |
asn_contacts | 130 |
asn_intel | 0 |
attack_groups | 176 |
attack_software | 825 |
attack_techniques | 697 |
attribution_map | 2.7M |
campaigns | 29 |
campaign_indicators | 0 |
cases | 620 |
case_entities | 1.6K |
case_evidence | 1.3K |
case_indicators | 792 |
case_notes | 0 |
class_rules | 14 |
countries | 242 |
country_actor | 335 |
country_case | 32 |
country_corridor | 194 |
country_gap | 2.7K |
country_legal | 1K |
country_metric | 5.6K |
country_org | 1.3K |
country_source | 4.2K |
country_unit | 0 |
crypto_attribution | 18 |
cve_intel | 1.6K |
detection_rules | 0 |
dns_records | 19.9K |
domain_spec | 189 |
enrichments | 307.9K |
enrichment_queue | 0 |
entity_link | 0 |
entity_links | 21.1K |
evidence_log | 0 |
feed_registry | 972 |
human_security | 568 |
humint_sources | 32 |
indicators | 1.2M |
indicator_sources | 2.1M |
indicator_tags | 3.2M |
ingest_queue | 0 |
intel_disciplines | 45 |
ioc_rollup | 0 |
ip_dataset_imports | 0 |
ip_intel | 0 |
ip_ranges | 0 |
job_runs | 3 |
kv_cache | 918 |
legal_requests | 0 |
malicious_types | 28 |
mission_domains | 52 |
narratives | 64 |
netflow | 0 |
net_log | 850 |
passive_dns | 4.6K |
platform_log | 35 |
playbook_runs | 0 |
ransomware_decryptors | 18 |
ransomware_groups | 20 |
ransomware_victims | 207 |
risk_history | 165 |
sanctions | 20 |
saved_searches | 35 |
sectors | 8 |
settings | 41 |
social_posts | 0 |
sources | 302 |
source_catalog | 1.2K |
source_health | 0 |
statistics | 0 |
stat_rollup | 0 |
tags | 53 |
takedown_requests | 0 |
taxii_collections | 3 |
tip_reports | 1.2K |
triage_state | 0 |
user_api_keys | 0 |
wanted | 50 |
watchlists | 5 |
watchlist_items | 5 |
website_tech | 0 |
whois_cache | 2.5K |
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron