Mission Domains

🏦 Anti-Money Laundering

Mission domain · code aml

Catalog sources

21 no-auth

Disciplines

mapped

Data points

covered

Skills

run →

automation

🔧 Workbench 📈 Native dashboard All sources → AI Skills Playbooks Copilot brief Report

Intelligence Disciplines

FININT (11) CRYPTINT (8) SANCINT (5) CORPINT (4) GOVINT (2) RISKINT (1) CRIMINT (1)

Data Points

company (12) crypto_address (9) person (8) sanction (4) location (2) lei (1) crypto_tx (1) filing (1)

Sources for this domain (23)

Name	Category	Auth	Format
Arkham Intelligence Entity attribution & flow analysis.	Crypto Attribution	NONE	`html`	home↗ api↗
AUSTRAC (Australia) Australian FIU / AML regulator.	FIU	NONE	`html`	home↗ api↗
Basel AML Index Country money-laundering/terror-financing risk.	AML Risk	NONE	`html`	home↗ api↗
Breadcrumbs Free visual crypto tracing.	Crypto Investigation	NONE	`html`	home↗ api↗
Egmont Group of FIUs Global financial intelligence unit network.	FIU Network	NONE	`html`	home↗ api↗
FATF AML/CFT standards, typologies, grey/black lists.	AML Standards	NONE	`html`	home↗ api↗
FinCEN Advisories & 314(a) US FIU advisories, SAR guidance, 314(a).	FIU	NONE	`html`	home↗ api↗
FINTRAC (Canada) Canadian FIU advisories & penalties.	FIU	NONE	`html`	home↗ api↗
GLEIF LEI (Golden Copy) Global Legal Entity Identifier records.	Legal Entity	NONE	`json`	home↗ api↗
GraphSense TagPacks Open attribution tags for blockchain addresses.	Crypto Attribution	NONE	`text`	home↗ api↗
ICIJ Offshore Leaks DB Panama/Paradise/Pandora Papers entity graph.	Corporate Leaks	NONE	`html`	home↗ api↗
INTERPOL Financial Crime Global financial crime & anti-corruption ops.	Financial Crime	NONE	`html`	home↗ api↗
mempool.space API Bitcoin transaction/address analytics API.	Blockchain Explorer	NONE	`json`	home↗ api↗
MetaSleuth (Blocksec) Fund-flow tracing & labelling.	Crypto Investigation	NONE	`html`	home↗ api↗
MistTrack AML risk scoring & tracing (SlowMist).	Crypto Investigation	NONE	`html`	home↗ api↗
OFAC Sanctioned Crypto Addresses (0xB10C) Machine-readable OFAC-designated wallet lists per chain.	Crypto Sanctions	NONE	`text`	home↗ api↗
OFAC SDN US Treasury Specially Designated Nationals list.	Sanctions	NONE	`csv`	home↗ api↗
Open Ownership Register Beneficial-ownership data standard & register.	Beneficial Ownership	NONE	`html`	home↗ api↗
OpenSanctions (default) Consolidated sanctions, PEPs, watchlists (FollowTheMoney).	Sanctions/PEP	NONE	`json`	home↗ api↗
OXT / WalletExplorer Bitcoin wallet clustering & attribution.	Crypto Attribution	NONE	`html`	home↗ api↗
UNODC / GPML UN money-laundering & asset-recovery programme.	AML	NONE	`html`	home↗ api↗
OpenCorporates Largest open company registry.	Corporate Registry	KEY	`json`	home↗ api↗
Sanctions.io Aggregated sanctions & PEP screening API.	Sanctions/PEP	KEY	`json`	home↗ api↗

🔍 Lookup

📊 Pre-built Queries · Anti-Money Laundering

Sources in this domain No-auth feeds only High-severity indicators Recent additions Sanctioned entities Open cases

🔄 Live Datasets & APIs (6 key-free · ingestible)

Dataset / API	Format	Endpoint
GLEIF LEI (Golden Copy)	`json`	https://api.gleif.org/api/v1/lei-records	collect
GraphSense TagPacks	`text`	https://raw.githubusercontent.com/graphsense/graphsense-tagp	collect
mempool.space API	`json`	https://mempool.space/api/	collect
OFAC Sanctioned Crypto Addresses (0xB10C)	`text`	https://raw.githubusercontent.com/0xB10C/ofac-sanctioned-dig	collect
OFAC SDN	`csv`	https://www.treasury.gov/ofac/downloads/sdn.csv	collect
OpenSanctions (default)	`json`	https://data.opensanctions.org/datasets/latest/default/entit	collect

Run Auto-Collect Datasets Hub Import

📜 Playbook — Anti-Money Laundering operations

Direction — frame the requirement for Anti-Money Laundering: what decision does this support, by when?
Collection — collect from the 23 mapped domain sources and enabled feeds; capture provenance and observe OPSEC.
Processing — normalize, de-duplicate and enrich the collected data.
Analysis — correlate against local holdings; apply ACH; assign confidence.
Dissemination — open a case, draft a report, share via STIX/MISP.
Feedback — set an alert rule / watchlist to monitor for change.

⚡ AI Skills & Automation

🤖 Copilot brief ⚡ AI Skills Resolve Enrich Auto-Collect Hunt Report Export

Automate unattended via the cron pipeline (collect → ingest → resolve → enrich → score → alert).

🗃 Data Management

+ Case + Campaign Watchlist Tag Save search Whitelist Export STIX/MISP Report

🧩 Advanced Capabilities

Link Analysis Pivot Explorer Timeline Threat Hunting Analytics Detection Rules Blockchain OSINT Pivot Passive DNS TAXII 2.1 MISP Feed Create Alert Rule NetFlow Coverage & Gaps

🔗 Pivots

Sources →Country risk →Threat feed →Cases →Campaigns →

✨ Enrichment pathways

Enrichment Runner →Resolve locally →Integrations →

Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook