Demo

Three cases, built from synthetic evidence

Each case below is the real product running over evidence written by hand for this purpose. It describes no real organization and is not threat intelligence. What you see is what an analyst sees: the same workspace, the same findings, the same citations, the same unknowns. Writes are disabled.

Want to run it over your own evidence? See the plans.