CORE v1.0 · MODULE 07

ARGUS7 / ENTITY GRAPH 3D

Graph

Rendere interrogabili entità e relazioni mostrando tipo di arco, evidenza, confidenza, stato e tempo.

INPUTSOURCEMODULE ANALYSISEVIDENCEHUMAN REVIEWOUTPUT

01 / ENTITY GRAPH 3D

Ogni elemento visualizzato deriva dal dataset del caso.

Zoom, pan, filtri, selezione e dettaglio espongono entità, relazioni, Source ID ed Evidence ID. Nessuna rotazione automatica o dato casuale.

Node depth = analytical distance from public source Verified / corroborated Derived / synthetic6 / 6 NODES · 5 RELATIONSPan: drag · Zoom: controls · No automatic rotation

02 / MODULE SPECIFICATION

Scopo, responsabilità e confini operativi.

La pagina mantiene nomi, agenti, routing e dipendenze della baseline ARGUS7.

PURPOSE

Rendere interrogabili entità e relazioni mostrando tipo di arco, evidenza, confidenza, stato e tempo.

PROTOTYPE

AINPUTS

INPUTS

Entità risolte
Relazioni candidate
Eventi
Evidence ID e Source ID

BPROCESS

PROCESS

Entity resolution
Relationship creation
Temporal filtering
Pattern detection
Path analysis

CACTIVATED AGENTS

ACTIVATED AGENTS

Graph Orchestrator
Entity Extraction
Relationship Identification
Identity Correlation
Query & Search
Forensic Validation

DTOOLS / SOURCES

TOOLS / SOURCES

Graph DB self-hosted
Graph API mediata
Vector Search
Session History

EVALIDATION / EVIDENCE

VALIDATION / EVIDENCE

Provenienza per ogni arco
Identity merge review
Tempo e fonte
Vicinanza grafica non equivale ad attribuzione

FOUTPUT

OUTPUT

Entity Graph 3D
Relationship detail
Evidence-linked paths
Graph report

CONNECTED MODULES / COMPONENTS

Tutti i moduli specialisticiEvidenceReport

03 / RELATIONSHIP ↔ EVIDENCE

Il linguaggio del controllo segue la funzione del modulo.

Non viene forzata una coppia ATTACK ↔ DEFENSE dove non avrebbe significato investigativo.

RELATIONSHIP

Typed node
Typed edge
Time
Confidence

EVIDENCE

Source ID
Evidence ID
Status
Lineage

04 / CONNECTED CASES

Il modulo non opera in isolamento.

Gli stessi case study attraversano più moduli, con un unico modello dati e la stessa catena di evidenza.

CASE-CY-2023-001INTERACTIVE DEMONSTRATION

REAL PUBLIC CYBERSECURITY CASE

MOVEit Transfer / CL0P

5 EVIDENCE · 4 RELATIONSHIPSCyber · Intel · Investigations · Graph · Forensics · Research · Strategy

CASE-TI-2024-002INTERACTIVE DEMONSTRATION

REAL PUBLIC THREAT INTELLIGENCE CASE

Volt Typhoon

5 EVIDENCE · 5 RELATIONSHIPSIntel · Cyber · Profiler · Graph · Investigations · Research · Strategy

CASE-SC-2024-003INTERACTIVE DEMONSTRATION

REAL SOFTWARE SUPPLY-CHAIN CASE

XZ Utils / CVE-2024-3094

5 EVIDENCE · 4 RELATIONSHIPSResearch · Cyber · Forensics · Intel · Graph · Investigations · Strategy

CASE-DF-2026-004FORENSIC BENCHMARK

FORENSIC BENCHMARK / DOCUMENTED SIMULATED EVIDENCE

NIST Forensic Lab

4 EVIDENCE · 4 RELATIONSHIPSVision · Forensics · Investigations · Graph · Evidence Pipeline

CASE-FR-2026-005INTERACTIVE DEMONSTRATION

SYNTHETIC INVESTIGATION BASED ON REAL FBI-DOCUMENTED PATTERNS

FBI IC3 BEC Lab

5 EVIDENCE · 4 RELATIONSHIPSFraud · Profiler · Investigations · Graph · Intel · Research · Strategy