Alert Triage AssistantPrivacy-first AI for SOC alert triage

Public indicators

Look up a public indicator

Guest lookup across MITRE ATT&CK, CISA KEV, the NVD, and Spamhaus DROP. RDAP is included when the registry answers. Private and internal addresses are refused. No API key is accepted.

HelpAbout this beta

Required notice

This product uses data from the NVD API but is not endorsed or certified by the NVD.

MITRE ATT&CK

© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

ATT&CK license
License
-------
The MITRE Corporation (MITRE) hereby grants you a non-exclusive, royalty-free license to use ATT&CK® for research,
development, and commercial purposes. Any copy you make for such purposes is authorized provided that you reproduce
MITRE's copyright designation and this license in any such copy.

"© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation."

Disclaimers
-----------
MITRE does not claim ATT&CK enumerates all possibilities for the types of actions and behaviors documented as part
of its adversary model and framework of techniques. Using the information contained within ATT&CK to address or cover
full categories of techniques will not guarantee full defensive coverage as there may be undisclosed techniques or
variations on existing techniques not documented by ATT&CK.

ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN ARE PROVIDED ON AN "AS IS" BASIS AND THE CONTRIBUTOR, THE
ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS,
AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT
THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR
FITNESS FOR A PARTICULAR PURPOSE.

MITRE CVE List

© The MITRE Corporation. CVE® and the CVE logo are registered trademarks of The MITRE Corporation.

This product uses the CVE List under the CVE Program Terms of Use. This use is not an endorsement by The MITRE Corporation or the CVE Program.

CVE List license
CVE List
--------
Source: CVE Program Terms of Use, https://www.cve.org/Legal/TermsOfUse
Dataset: CVE List V5, https://github.com/CVEProject/cvelistV5

© The MITRE Corporation. CVE® and the CVE logo are registered trademarks of The MITRE Corporation.

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

DISCLAIMERS

ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN "AS IS" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.

FIRST EPSS

See EPSS at https://www.first.org/epss.

Jay Jacobs, Sasha Romanosky, Benjamin Edwards, Michael Roytman, Idris Adjerid, (2021), Exploit Prediction Scoring System, Digital Threats Research and Practice, 2(3).

This product shows FIRST EPSS scores. This use is not an endorsement by FIRST or the EPSS SIG.

Known Exploited Vulnerabilities data is published by CISA under CC0. ATA does not display the CISA logo or the DHS seal, and this use is not an endorsement by CISA or DHS.

DROP membership is credited to the Spamhaus Project. The feed date and copyright text are shown with each result.

abuse.ch SSLBL

This product shows abuse.ch SSL Blacklist (SSLBL) certificate data. SSLBL is free to use under CC0.

Terms of use: https://abuse.ch/terms-of-use/. Feed: https://sslbl.abuse.ch/blacklist/.

abuse.ch serves SSLBL as-is on a best-effort basis. A listing is a lead from that feed. Absence from the feed leaves the indicator unresolved. This use is not an endorsement by abuse.ch.

Credit: abuse.ch SSL Blacklist (SSLBL).

MISP

MISP taxonomies and galaxies are published by the MISP project and its taxonomy authors (including Alexandre Dulaunoy, CIRCL, Andras Iklody, Raphael Vinot, and Deborah Servili) under CC0 1.0. ATA reproduces a pinned subset and does not claim endorsement by the MISP project or CIRCL.

Credit: MISP Project. The pinned subset is CC0 1.0 and is read from this deployment.

Indicator type