ARGUS7by OSINTLAB360
IN DEVELOPMENT
IT/EN

CORE v1.0 · MODULE 03

ARGUS7 / FRAUD RELATIONSHIP WORKBENCH

Fraud

Correlare identità, email, domini, account, transazioni ed eventi per spiegare un percorso di frode.

Open workbench ↓Full architecture ↗
INPUTSOURCEMODULE ANALYSISEVIDENCEHUMAN REVIEWOUTPUT

01 / FRAUD RELATIONSHIP WORKBENCH

Every visual element is derived from the case dataset.

Zoom, pan, filters, selection and details expose entities, relationships, Source IDs and Evidence IDs. No automatic rotation or random data.

100%
Node depth = analytical distance from public source Verified / corroborated Derived / synthetic6 / 6 NODES · 4 RELATIONSPan: drag · Zoom: controls · No automatic rotation

02 / MODULE SPECIFICATION

Purpose, responsibility and operational boundaries.

This page preserves the names, agents, routing and dependencies of the ARGUS7 baseline.

PURPOSE

Correlare identità, email, domini, account, transazioni ed eventi per spiegare un percorso di frode.

PROTOTYPE
AINPUTS

INPUTS

  • Email e header
  • Domini e URL
  • Controparti e account
  • Richieste e transazioni
BPROCESS

PROCESS

  • Impersonation analysis
  • Domain comparison
  • Payment path
  • Pressure indicators
  • Contradiction analysis
CACTIVATED AGENTS

ACTIVATED AGENTS

  • Fraud processing sotto Fraud Router
  • Strategy per mitigazione
  • Local LLM per linguaggio controllato
DTOOLS / SOURCES

TOOLS / SOURCES

  • DNS / RDAP / CT
  • SPF / DKIM / DMARC
  • Graph Intelligence
  • Fonti FBI IC3
EVALIDATION / EVIDENCE

VALIDATION / EVIDENCE

  • Conferma indipendente degli indicatori
  • Verifica fuori banda
  • Dato sintetico marcato
  • Dual control sui pagamenti
FOUTPUT

OUTPUT

  • Fraud relationship graph
  • Indicator set
  • Contradiction ledger
  • Mitigation actions
CONNECTED MODULES / COMPONENTS
ProfilerInvestigationsGraphIntelResearchStrategy

03 / ADVERSARY ACTIVITY ↔ DEFENSIVE RESPONSE

Adversary activity and defensive response, without operationally abusable content.

Publicly documented TTPs are described for detection, triage and mitigation. Exploits, payloads and executable offensive procedures are not published.

FRAUD PATH
  • Impersonation
  • Lookalike domain
  • Payment redirection
  • Urgency
CONTROL PATH
  • Out-of-band verification
  • Dual control
  • Payment hold
  • Evidence preservation

04 / CONNECTED CASES

The module does not operate in isolation.

The same case studies traverse multiple modules, using one data model and one evidence chain.

CASE-FR-2026-005INTERACTIVE DEMONSTRATION

SYNTHETIC INVESTIGATION BASED ON REAL FBI-DOCUMENTED PATTERNS

FBI IC3 BEC Lab

5 EVIDENCE · 4 RELATIONSHIPSFraud · Profiler · Investigations · Graph · Intel · Research · Strategy