IOC Enrichment Engine
Indicator lookup
Paste an IP, domain, URL, file hash, or email. The platform classifies it, queries reputation sources, attributes activity, and asks the Co-Analyst Engine for a briefing.
Samples
Sources consulted
- · VirusTotal · AbuseIPDB · AlienVault OTX
- · URLScan · GreyNoise · Spamhaus
- · Internal SARA threat-intel feed (when configured)
Demo mode uses deterministic synthetic enrichment so the same indicator always returns the same verdict.
◇
Enter an indicator
Paste any IOC. The platform auto-detects the type and runs enrichment across all configured feeds.