Employee credentials in a stealer log
An infostealer on an employee's personal device exfiltrated credentials and an active session cookie for the corporate VPN portal. The record surfaced inside a bulk sale package on …
4 modules
IG-UC · CASE ARCHIVE
Use cases
The anatomy of real CTI cases: how a threat starts, how it is detected and how it is closed. Every file here is an example scenario.
Third-party risk through a supplier breach
The supplier's customer portal was leaked. The published dataset included API keys, webhook URLs and technical contact emails.
3 modules
Exposed admin panel on a forgotten subdomain
A subdomain left running after a marketing campaign ended stayed up on an outdated CMS version, with its panel exposed to the internet.
3 modules
A ransomware crew shifting target sectors
Leak site telemetry showed a clear sector and geography shift in the crew's victim distribution.
3 modules
Next step
What shows up on your own surface?
In a 30-minute session we run a live scan against your own domains.