๐Ÿ—บ๏ธ ARTIFACT MAP

Analysis โ†’ Artifact Map
๐Ÿ”— Advanced

๐Ÿ“š What You'll Learn Here

Relationship visualization โ€” which rules hit which files, IOC extraction, and campaign mapping.

Learning Outline

  • 1. Rule-File Relationships โ€” Mapping detections to samples
  • 2. IOC Extraction โ€” Pulling IOCs from matching files
  • 3. Cluster Analysis โ€” Grouping files by common matches
  • 4. Campaign Attribution โ€” Linking indicators across families
  • 5. Timeline Visualization โ€” When each rule triggered
  • 6. Threat Intelligence Integration โ€” MISP, OpenCTI
  • 7. Graph Databases โ€” Neo4j for relationship mapping
๐Ÿ› ๏ธ RELATIONSHIP MAP (Coming Soon)
Visualize connections between rules, files, and IOCs.

๐Ÿ”— Resources