Relational Intelligence PlatformONTOLOGY v20.0

Intel Graph

Explore interconnected cybersecurity knowledge across MITRE ATT&CK tactics & techniques, security tools, vulnerabilities, malware analysis deconstructions, and digital forensic artifacts.

Tactics15
Techniques19
Tools7
CVEs2
Artifacts2
Interactive ExplorerATT&CK TechniquesTool ArsenalCVE IntelMalware IntelForensic Artifacts
Amadey Windows Memory Dump (forensic_artifact)Amadey Mem Dumpwords.wasm WebAssembly Binary (forensic_artifact)words.wasmInitial Access (tactic)TA0001Execution (tactic)TA0002Persistence (tactic)TA0003Privilege Escalation (tactic)TA0004Credential Access (tactic)TA0006Discovery (tactic)TA0007Lateral Movement (tactic)TA0008Collection (tactic)TA0009Exfiltration (tactic)TA0010Command and Control (tactic)TA0011Impact (tactic)TA0040Resource Development (tactic)TA0042Reconnaissance (tactic)TA0043Stealth (tactic)TA0044Defense Impairment (tactic)TA0045Obfuscated Files or Information (technique)T1027Masquerading (technique)T1036Masquerading: Match Legitimate Name or Location (technique)T1036.005Exfiltration Over C2 Channel (technique)T1041Scheduled Task/Job (technique)T1053Scheduled Task/Job: Scheduled Task (technique)T1053.005Input Capture: Keylogging (technique)T1056.001Command and Scripting Interpreter: Windows Command Shell (technique)T1059.003Command and Scripting Interpreter: Python (technique)T1059.006Application Layer Protocol: Web Protocols (technique)T1071.001Exploit Public-Facing Application (technique)T1190System Binary Proxy Execution (technique)T1218System Binary Proxy Execution: Rundll32 (technique)T1218.011Virtualization/Sandbox Evasion (technique)T1497Virtualization/Sandbox Evasion: System Checks (technique)T1497.001Virtualization/Sandbox Evasion: Time Based Evasion (technique)T1497.003Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder (technique)T1547.001Abuse Elevation Control Mechanism: Sudo and Sudo Caching (technique)T1548.003Hijack Execution Flow: DLL Side-Loading (technique)T1574.002ffuf (tool)ffufGit Dumper (tool)Git DumperPrusaSlicer (tool)PrusaSlicerPython 3 (tool)Python 3Volatility 3 (tool)Volatility 3WASM Decompiler / WABT (tool)WASM DecompilerYARA (tool)YARACVE-2024-32651 (vulnerability)CVE-2024-32651CVE-2024-34716 (vulnerability)CVE-2024-34716Amadey Writeup (writeup)Amadey WriteupDaily Re (writeup)Daily ReTrickster (writeup)TricksterValleyRAT Analysis (writeup)ValleyRAT
ONTOLOGY V20.0
Drag to pan • Scroll to zoom • Click node for details
Provenance-Backed Model

Every relationship in the knowledge graph requires empirical textual evidence with exact line coordinates, cryptographic snippet hashes, and operational posture tagging.

MITRE ATT&CK v20.0 Grounding

Tactics and techniques strictly mirror the latest Enterprise ATT&CK v20.0 specification, including the Stealth (TA0044) and Defense Impairment (TA0045) tactical taxonomy split.

Static-First Determinism

Compiled at build-time using atomic staging and multi-engine DLP scanning. No external databases, runtime CMS dependencies, or dynamic server-side graph queries.