Loading ThreatScope content…
ThreatScope command center
MonitoringLocal defensive intelligence shaped for actor prioritization, campaign context, ATT&CK coverage, malware tracking, IOC review, and SOC-ready notes.
Ingest
Mock actor, campaign, IOC, and malware records stay local.
Prioritize
Critical and high severity profiles surface first for review.
Map
Technique mappings group behavior into defensive coverage.
Review
Safe indicators and report briefs support analyst triage.
Local mock profiles
Highest analyst priority
Recent activity notes
Safe sample indicators
Operations board
Campaign stream
Mock report notes sorted by most recent activity
Mock campaign note covering unusual help desk changes, MFA reset events, and first-seen device access.
Mock campaign note focused on unusual cloud access patterns and permission changes in research environments.
Mock activity cluster involving credential harvesting signals, mailbox access anomalies, and document repository enumeration.
Mock campaign note focusing on exposed file transfer services and unusual outbound data movement.
Mock reporting cluster involving cryptocurrency-themed lures, suspicious script execution, and follow-on credential access indicators.
Dataset profile
Distribution of tracked profiles by category
Dominant category: APT
Coverage workbench
Review technique coverage by tactic and actor
Use mapped techniques to compare actor behavior against defensive monitoring themes before opening profile-level notes.
Priority actors
North Korea
Lazarus Group is a state-linked intrusion set known for financially motivated operations, espionage, and cryptocurrency-focused activity. This profile is written for defensive analysis and portfolio demonstration.
Unknown / cybercrime ecosystem
LockBit is represented as a ransomware ecosystem focused on financial extortion, affiliate-driven intrusions, data theft pressure, and file encryption impact.
Russia
APT28 / Fancy Bear is modeled as an espionage-focused actor associated with political, defense, media, and government targeting. Content is kept defensive and educational.