Forensia CTI Core

Related indicators (14)

Shared non-noise tags (narrow join).

[ip] 120.26.208.96
tags: botnet_cc, c2intelfeeds, cobaltstrike, win.cobalt_strike
[ip] 117.72.39.83
tags: botnet_cc, c2intelfeeds, cobaltstrike, win.cobalt_strike
[ip] 43.155.169.245
tags: botnet_cc, cobaltstrike, win.cobalt_strike
[ip] 152.136.253.101
tags: botnet_cc, cobaltstrike, win.cobalt_strike
[ip] 120.76.143.184
tags: botnet_cc, cobaltstrike, win.cobalt_strike
[url] http://fimmora.surf:6504
tags: botnet_cc
[domain] kori1903.anondns.net
tags: botnet_cc
[ip] 213.232.235.51
tags: botnet_cc

Sources / connectors (3)

Deduped connector weight from graph context.

Additional pivots (no data yet)

CONTINUE INVESTIGATION

High-signal pivots without leaving the thread you started in search.

Related alerts, reports, and entities
Structured pivots from local graph context.
Open intel graph (neighborhood)
See edges, pivots, and corroboration at a glance.
Investigation canvas
Full inspector with neighbor expansion.