CORE v1.0 · MODULE 10
ARGUS7 / DECISION SUPPORT
Strategy
Trasformare finding, rischio, impatto, confidenza e vincoli in azioni prioritarie, alternative e rischio residuo.
INPUTSOURCEMODULE ANALYSISEVIDENCEHUMAN REVIEWOUTPUT
01 / DECISION SUPPORT
Every visual element is derived from the case dataset.
Zoom, pan, filters, selection and details expose entities, relationships, Source IDs and Evidence IDs. No automatic rotation or random data.
IMPACT →LIKELIHOOD ↑RISK CONTEXT / DEMONSTRATION
02 / DEFENSIVE GOVERNANCE
From vulnerability to remediation priority.
A traceable view of the CISA BOD 26-04 context: intelligence, exposure, known exploitation, technical impact and human accountability.
OFFICIAL DIRECTIVE CONTEXT / DEFENSIVE GOVERNANCE
CISA BOD 26-04 prioritization model
This ARGUS7 view illustrates how evidence can support risk-based remediation decisions. It is not a CISA implementation, a compliance determination, or a live assessment of any organization.
Exposure and known exploitation raise priority; they do not independently establish compromise.
Every proposed action retains an owner, rationale, dependency, due date and residual-risk statement.
Directive context remains linked to the original source and implementation guidance.
03 / MODULE SPECIFICATION
Purpose, responsibility and operational boundaries.
This page preserves the names, agents, routing and dependencies of the ARGUS7 baseline.
PURPOSE
Trasformare finding, rischio, impatto, confidenza e vincoli in azioni prioritarie, alternative e rischio residuo.
TARGET ARCHITECTUREA
INPUTSINPUTS
- Finding
- Risk e impact
- Confidence breakdown
- Vincoli e dipendenze
B
PROCESSPROCESS
- Hypothesis generation
- Prioritization
- Resource allocation
- Dependency mapping
- Residual-risk analysis
C
ACTIVATED AGENTSACTIVATED AGENTS
- Strategy Orchestrator
- Hypothesis Generation
- Investigation Plan
- Resource Allocation
D
TOOLS / SOURCESTOOLS / SOURCES
- Layer 9 / MCP via n8n
- Layer 8 Memory / RAG
- Vector Search
- Feedback moduli
E
VALIDATION / EVIDENCEVALIDATION / EVIDENCE
- Success e stop condition
- Alternative
- Impatto / costo / rischio
- HITL su escalation
F
OUTPUTOUTPUT
- Recommended actions
- Priority queue
- Decision tree
- Residual-risk statement
CONNECTED MODULES / COMPONENTS
InvestigationsCyberIntelFraudGovernance
04 / RISK ↔ CONTROL
Adversary activity and defensive response, without operationally abusable content.
Publicly documented TTPs are described for detection, triage and mitigation. Exploits, payloads and executable offensive procedures are not published.
- Known exploitation
- Asset exposure
- Technical impact
- Constraints
- Priority
- Owner
- Dependency
- Residual risk
05 / CONNECTED CASES
The module does not operate in isolation.
The same case studies traverse multiple modules, using one data model and one evidence chain.
CASE-CY-2023-001INTERACTIVE DEMONSTRATION
REAL PUBLIC CYBERSECURITY CASE
MOVEit Transfer / CL0P
5 EVIDENCE · 4 RELATIONSHIPSCyber · Intel · Investigations · Graph · Forensics · Research · StrategyCASE-TI-2024-002INTERACTIVE DEMONSTRATION
REAL PUBLIC THREAT INTELLIGENCE CASE
Volt Typhoon
5 EVIDENCE · 5 RELATIONSHIPSIntel · Cyber · Profiler · Graph · Investigations · Research · StrategyCASE-SC-2024-003INTERACTIVE DEMONSTRATION
REAL SOFTWARE SUPPLY-CHAIN CASE
XZ Utils / CVE-2024-3094
5 EVIDENCE · 4 RELATIONSHIPSResearch · Cyber · Forensics · Intel · Graph · Investigations · StrategyCASE-FR-2026-005INTERACTIVE DEMONSTRATION
SYNTHETIC INVESTIGATION BASED ON REAL FBI-DOCUMENTED PATTERNS