Threat Theaters

🎖 Military & Defense theater

Assesses state military capabilities, force posture, and the defense-industrial and military-cyber threats that accompany them, from ICS/OT targeting to wiper operations by uniformed cyber units. Fusing order-of-battle with cyber telemetry gives early warning of mobilization and destructive intent.

Live indicators

0
in this theater

High severity

0
score ≥ 0.75 (top 60)

Actors tracked

5
documented

Mapped sources

0
in catalog

🛡 Exploited Vulnerabilities

CVEVendor / ProductRansomwareMalware
CVE-2020-3259Cisco Adaptive Security AppliancKNOWNransomware (KEV-flagged)
CVE-2023-20269Cisco Adaptive Security AppliancKNOWNAkira, LockBit (Cisco ASA)
CVE-2015-2291Intel Ethernet Diagnostics DriveKNOWNransomware (KEV-flagged)
CVE-2018-8405Microsoft DirectX Graphics Kernel (DKNOWNransomware (KEV-flagged)
CVE-2018-8406Microsoft DirectX Graphics Kernel (DKNOWNransomware (KEV-flagged)
CVE-2020-3580Cisco Adaptive Security AppliancKNOWNransomware (KEV-flagged)
CVE-2025-20333Cisco Secure Firewall Adaptive S
CVE-2025-20362Cisco Secure Firewall Adaptive S
CVE-2022-43769Hitachi Vantara Pentaho Business Analytics
CVE-2022-43939Hitachi Vantara Pentaho Business Analytics
CVE-2024-8956PTZOptics PT30X-SDI/NDI Cameras
CVE-2024-8957PTZOptics PT30X-SDI/NDI Cameras

📜 Military & Defense Playbook

  1. Collect satellite imagery, ADS-B and AIS tracks, unit signals, and defense-cyber telemetry over areas of interest.
  2. Georectify imagery, correlate order-of-battle indicators, and extract IOCs from military-linked intrusions.
  3. Assess force posture, mobilization, and ICS/OT targeting against baseline patterns of life.
  4. Attribute cyber operations to state military units (e.g., Sandworm/GRU) via malware and infrastructure overlap.
  5. Brief commanders and partners with fused order-of-battle and cyber-threat assessments.
  6. Prime defensive hardening of targeted critical infrastructure and issue warning orders.

⚡ AI Skills & Automation

🤖 Copilot brief⚡ AI SkillsResolveEnrichAuto-CollectHuntReportExport

Automate unattended via the cron pipeline (collect → ingest → resolve → enrich → score → alert).

Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

🔍 Lookup & Enrich

💡 Recommendations

⚙ Automation

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php