🎖 Military & Defense theater
Assesses state military capabilities, force posture, and the defense-industrial and military-cyber threats that accompany them, from ICS/OT targeting to wiper operations by uniformed cyber units. Fusing order-of-battle with cyber telemetry gives early warning of mobilization and destructive intent.
Live indicators
0
in this theater
High severity
0
score ≥ 0.75 (top 60)
Actors tracked
5
documented
Mapped sources
0
in catalog
🏹 Threat Actors
🦠 Malware & Tools
🛡 Exploited Vulnerabilities
| CVE | Vendor / Product | Ransomware | Malware |
|---|---|---|---|
| CVE-2020-3259 | Cisco Adaptive Security Applianc | KNOWN | ransomware (KEV-flagged) |
| CVE-2023-20269 | Cisco Adaptive Security Applianc | KNOWN | Akira, LockBit (Cisco ASA) |
| CVE-2015-2291 | Intel Ethernet Diagnostics Drive | KNOWN | ransomware (KEV-flagged) |
| CVE-2018-8405 | Microsoft DirectX Graphics Kernel (D | KNOWN | ransomware (KEV-flagged) |
| CVE-2018-8406 | Microsoft DirectX Graphics Kernel (D | KNOWN | ransomware (KEV-flagged) |
| CVE-2020-3580 | Cisco Adaptive Security Applianc | KNOWN | ransomware (KEV-flagged) |
| CVE-2025-20333 | Cisco Secure Firewall Adaptive S | — | |
| CVE-2025-20362 | Cisco Secure Firewall Adaptive S | — | |
| CVE-2022-43769 | Hitachi Vantara Pentaho Business Analytics | — | |
| CVE-2022-43939 | Hitachi Vantara Pentaho Business Analytics | — | |
| CVE-2024-8956 | PTZOptics PT30X-SDI/NDI Cameras | — | |
| CVE-2024-8957 | PTZOptics PT30X-SDI/NDI Cameras | — |
📚 Priority sources & datasets
📜 Military & Defense Playbook
- Collect satellite imagery, ADS-B and AIS tracks, unit signals, and defense-cyber telemetry over areas of interest.
- Georectify imagery, correlate order-of-battle indicators, and extract IOCs from military-linked intrusions.
- Assess force posture, mobilization, and ICS/OT targeting against baseline patterns of life.
- Attribute cyber operations to state military units (e.g., Sandworm/GRU) via malware and infrastructure overlap.
- Brief commanders and partners with fused order-of-battle and cyber-threat assessments.
- Prime defensive hardening of targeted critical infrastructure and issue warning orders.
⚡ AI Skills & Automation
Automate unattended via the cron pipeline (collect → ingest → resolve → enrich → score → alert).
🧩 Advanced Capabilities
🔗 Cross-domain pivots
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron