SpectraGraph

SOC PRIME 08 Tasks Docs

Live Threat Operations Console

Judge-ready simulation of SpectraGraph's distributed OSINT workflow. Review active investigations, cross-source intelligence, and breach timelines with neon clarity.

Neo4j Graph Intel Celery · Redis · FastAPI SOC-ready Runbooks Dark Web Telemetry Vaultless Demo Mode
Detections Today 42
Median Response 11m
Coverage Regions 18
Uptime 99.9%

Quick Investigation

domain.comdomain
Domain → Breachworkflow
Target domain.com
Transform Domain → Breach
Mode Rapid

Recent Investigations

domain.comDomain → BreachActive
example.netIP → LocationMonitoring
domain.comEmail → Social MediaReady
example.netDomainEscalate

Statistics Overview

Investigations

23 +5.8% vs 24h

Completed Tasks

157 +2.4%

Active Transforms

12 +1 queued

Domain to Breach

436 +2.8%

Email to Social

112 +3.4%

Pending Tasks

8 backlog
Transform ActivityLast 7 days
MonTueWedThuFriSatSun
Rest APIs
25%
Social Media
20%
DNS
18%
Leaks
10%
WHOIS
12%

Breach Timeline

09:00
Credential spray detected against corp VPN
11:30
Pivot to social media persona "cobalt_ops"
14:10
Leak forum chatter referencing stolen workspace
16:45
Command & control IP handed off to takedown

Active Playbooks

Ransomware Perimeter Hardening Triggered · 4m ago
EDR Firewall SIEM
Dark Web Credential Sweep Queued · 12m
Tor Pastebin AI OCR
Brand Abuse Hunt Completed · 27m
Social Trademark ML Classifier

Integrations

Rest API

Push incidents to ServiceNow and sync downstream workflows automatically.

Slack Fusion

Stream enriched IOCs into analyst war rooms with actionable summaries.

Jupiter Notebook

Export graph snapshots into notebooks for rapid hypothesis testing.

SIEM Bridge

Correlate OSINT signals with internal telemetry to close the loop.