# entities

id: person_001
name: Viktor Petrov
type_ref: person
status: active
description: OSINT entity: Viktor Petrov
domain: cybersecurity
tags: ["risk_score", "country", "aliases", "first_seen", "last_seen", "role"]
source: humint
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"risk_score": 92, "country": "RU", "aliases": ["darkside_v", "vp_shadow"], "first_seen": "2023-06-15", "last_seen": "2025-11-20", "role": "operator"}


id: person_002
name: Li Wei
type_ref: person
status: active
description: OSINT entity: Li Wei
domain: cybersecurity
tags: ["risk_score", "country", "aliases", "first_seen", "last_seen", "role"]
source: sigint
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"risk_score": 78, "country": "CN", "aliases": ["ghost_dragon"], "first_seen": "2023-09-01", "last_seen": "2025-10-15", "role": "developer"}


id: person_003
name: Andrei Volkov
type_ref: person
status: active
description: OSINT entity: Andrei Volkov
domain: cybersecurity
tags: ["risk_score", "country", "aliases", "first_seen", "last_seen", "role"]
source: osint_social
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"risk_score": 65, "country": "UA", "aliases": ["a_v_cyber"], "first_seen": "2024-01-10", "last_seen": "2025-12-01", "role": "money_mule"}


id: ip_001
name: C2 Primary
type_ref: ip_address
status: active
description: OSINT entity: C2 Primary
domain: cybersecurity
tags: ["address", "asn", "country", "first_seen", "last_seen", "risk_score"]
source: threat_intel
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"address": "185.220.101.42", "asn": "AS9009", "country": "NL", "first_seen": "2023-08-15", "last_seen": "2025-11-30", "risk_score": 95}


id: ip_002
name: C2 Backup
type_ref: ip_address
status: active
description: OSINT entity: C2 Backup
domain: cybersecurity
tags: ["address", "asn", "country", "first_seen", "last_seen", "risk_score"]
source: threat_intel
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"address": "91.215.85.17", "asn": "AS48693", "country": "RU", "first_seen": "2024-02-01", "last_seen": "2025-10-22", "risk_score": 90}


id: ip_003
name: Proxy Node
type_ref: ip_address
status: active
description: OSINT entity: Proxy Node
domain: cybersecurity
tags: ["address", "asn", "country", "first_seen", "last_seen", "risk_score"]
source: network_scan
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"address": "45.33.32.156", "asn": "AS63949", "country": "US", "first_seen": "2024-05-10", "last_seen": "2025-09-15", "risk_score": 60}


id: domain_003
name: fileshare-cdn.net
type_ref: domain
status: active
description: OSINT entity: fileshare-cdn.net
domain: cybersecurity
tags: ["registrar", "created_date", "category", "risk_score"]
source: malware_analysis
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"registrar": "NameSilo", "created_date": "2023-11-03", "category": "payload_delivery", "risk_score": 82}


id: wallet_001
name: APT Primary BTC
type_ref: crypto_wallet
status: active
description: OSINT entity: APT Primary BTC
domain: cybersecurity
tags: ["currency", "address", "balance", "first_tx", "last_tx", "risk_score"]
source: blockchain_analysis
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"currency": "BTC", "address": "1oBRNtq3FaBNfBMohNkxAxrVK7VFF1mxth", "balance": 2.45, "first_tx": "2023-07-20", "last_tx": "2025-11-15", "risk_score": 90}


id: wallet_002
name: Mixer Output 1
type_ref: crypto_wallet
status: active
description: OSINT entity: Mixer Output 1
domain: cybersecurity
tags: ["currency", "address", "balance", "first_tx", "last_tx", "risk_score"]
source: blockchain_analysis
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"currency": "BTC", "address": "18Xizm1jrCPSEPFSnXXNR6omKtKY9oiqzw", "balance": 0.78, "first_tx": "2024-01-10", "last_tx": "2025-08-22", "risk_score": 75}


id: wallet_003
name: ETH Laundering
type_ref: crypto_wallet
status: active
description: OSINT entity: ETH Laundering
domain: cybersecurity
tags: ["currency", "address", "balance", "first_tx", "last_tx", "risk_score"]
source: blockchain_analysis
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"currency": "ETH", "address": "0x30543fe5a6e743849e63f8101ac616f8fd0ba84a", "balance": 15.3, "first_tx": "2024-03-05", "last_tx": "2025-12-01", "risk_score": 85}


id: malware_001
name: ShadowRAT v3
type_ref: malware
status: active
description: OSINT entity: ShadowRAT v3
domain: cybersecurity
tags: ["family", "hash_sha256", "first_seen", "detection_rate", "risk_score"]
source: malware_analysis
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"family": "RAT", "hash_sha256": "b9c5425e328e78ae760ac1111c3ce251d03e48de25dc30bf9491ffd61e26855f", "first_seen": "2023-08-20", "detection_rate": 0.35, "risk_score": 92}


id: malware_002
name: CryptoStealer
type_ref: malware
status: active
description: OSINT entity: CryptoStealer
domain: cybersecurity
tags: ["family", "hash_sha256", "first_seen", "detection_rate", "risk_score"]
source: malware_analysis
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"family": "stealer", "hash_sha256": "6656d618dc437b7909ef61f44780fc1013b51638744b6fac5e3ce97b08cd4b7a", "first_seen": "2024-04-12", "detection_rate": 0.22, "risk_score": 88}


id: vuln_001
name: CVE-2024-3400
type_ref: vulnerability
status: active
description: OSINT entity: CVE-2024-3400
domain: cybersecurity
tags: ["cvss", "affected_product", "patch_available", "exploited_in_wild", "risk_score"]
source: nvd
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"cvss": 9.8, "affected_product": "PAN-OS", "patch_available": true, "exploited_in_wild": true, "risk_score": 98}


id: vuln_002
name: CVE-2024-21887
type_ref: vulnerability
status: active
description: OSINT entity: CVE-2024-21887
domain: cybersecurity
tags: ["cvss", "affected_product", "patch_available", "exploited_in_wild", "risk_score"]
source: nvd
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"cvss": 8.2, "affected_product": "Ivanti Connect Secure", "patch_available": true, "exploited_in_wild": true, "risk_score": 85}


id: person_004
name: Sarah Chen
type_ref: person
status: active
description: OSINT entity: Sarah Chen
domain: finance
tags: ["risk_score", "country", "aliases", "first_seen", "last_seen", "role"]
source: humint
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"risk_score": 70, "country": "US", "aliases": ["s_chen_insider"], "first_seen": "2024-02-15", "last_seen": "2025-12-01", "role": "insider"}


id: person_005
name: Marcus Webb
type_ref: person
status: active
description: OSINT entity: Marcus Webb
domain: finance
tags: ["risk_score", "country", "aliases", "first_seen", "last_seen", "role"]
source: osint_financial
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"risk_score": 82, "country": "UK", "aliases": ["m_webb_trades"], "first_seen": "2024-03-01", "last_seen": "2025-11-28", "role": "trader"}


id: person_006
name: Dmitri Sokolov
type_ref: person
status: active
description: OSINT entity: Dmitri Sokolov
domain: finance
tags: ["risk_score", "country", "aliases", "first_seen", "last_seen", "role"]
source: humint
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"risk_score": 75, "country": "RU", "aliases": ["d_sok"], "first_seen": "2024-01-20", "last_seen": "2025-11-30", "role": "facilitator"}


id: org_003
name: Apex Capital Partners
type_ref: organization
status: active
description: OSINT entity: Apex Capital Partners
domain: finance
tags: ["jurisdiction", "type", "registered_date", "risk_score", "aum_millions"]
source: osint_financial
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"jurisdiction": "UK", "type": "hedge_fund", "registered_date": "2019-06-15", "risk_score": 55, "aum_millions": 340}


id: domain_004
name: apex-secure-comms.io
type_ref: domain
status: active
description: OSINT entity: apex-secure-comms.io
domain: finance
tags: ["registrar", "created_date", "category", "risk_score"]
source: osint_web
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"registrar": "Cloudflare", "created_date": "2024-04-01", "category": "communications", "risk_score": 45}


id: wallet_004
name: Trading Fund BTC
type_ref: crypto_wallet
status: active
description: OSINT entity: Trading Fund BTC
domain: finance
tags: ["currency", "address", "balance", "first_tx", "last_tx", "risk_score"]
source: blockchain_analysis
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"currency": "BTC", "address": "1Gbc72RfL42TomJvhwgAUB52zTD26EeEvv", "balance": 8.2, "first_tx": "2024-04-10", "last_tx": "2025-11-25", "risk_score": 55}


id: wallet_005
name: Webb Personal ETH
type_ref: crypto_wallet
status: active
description: OSINT entity: Webb Personal ETH
domain: finance
tags: ["currency", "address", "balance", "first_tx", "last_tx", "risk_score"]
source: blockchain_analysis
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"currency": "ETH", "address": "0x2784d638b34fa781359331a3ed13a32e97cc3166", "balance": 42.7, "first_tx": "2024-05-01", "last_tx": "2025-12-01", "risk_score": 48}


id: ip_004
name: Trading VPN
type_ref: ip_address
status: active
description: OSINT entity: Trading VPN
domain: finance
tags: ["address", "asn", "country", "first_seen", "last_seen", "risk_score"]
source: network_analysis
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"address": "104.21.45.89", "asn": "AS13335", "country": "US", "first_seen": "2024-06-01", "last_seen": "2025-11-30", "risk_score": 35}


id: signal_001
name: SOL-USD long signal
type_ref: trading_signal
status: active
description: OSINT entity: SOL-USD long signal
domain: finance
tags: ["symbol", "direction", "confidence", "timestamp", "pnl_percent", "risk_score"]
source: algo_detection
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"symbol": "SOL-USD", "direction": "long", "confidence": 0.44, "timestamp": "2026-01-15", "pnl_percent": 5.4, "risk_score": 26}


id: signal_002
name: MSFT long signal
type_ref: trading_signal
status: active
description: OSINT entity: MSFT long signal
domain: finance
tags: ["symbol", "direction", "confidence", "timestamp", "pnl_percent", "risk_score"]
source: algo_detection
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"symbol": "MSFT", "direction": "long", "confidence": 0.71, "timestamp": "2024-05-23", "pnl_percent": 10.3, "risk_score": 37}


id: signal_003
name: SOL-USD long signal
type_ref: trading_signal
status: active
description: OSINT entity: SOL-USD long signal
domain: finance
tags: ["symbol", "direction", "confidence", "timestamp", "pnl_percent", "risk_score"]
source: algo_detection
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"symbol": "SOL-USD", "direction": "long", "confidence": 0.66, "timestamp": "2025-07-17", "pnl_percent": -9.1, "risk_score": 61}


id: signal_004
name: AAPL long signal
type_ref: trading_signal
status: active
description: OSINT entity: AAPL long signal
domain: finance
tags: ["symbol", "direction", "confidence", "timestamp", "pnl_percent", "risk_score"]
source: algo_detection
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"symbol": "AAPL", "direction": "long", "confidence": 0.5, "timestamp": "2025-05-12", "pnl_percent": 13.9, "risk_score": 45}


id: signal_005
name: AAPL long signal
type_ref: trading_signal
status: active
description: OSINT entity: AAPL long signal
domain: finance
tags: ["symbol", "direction", "confidence", "timestamp", "pnl_percent", "risk_score"]
source: algo_detection
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"symbol": "AAPL", "direction": "short", "confidence": 0.4, "timestamp": "2025-02-03", "pnl_percent": 0.9, "risk_score": 70}


id: signal_006
name: SOL-USD short signal
type_ref: trading_signal
status: active
description: OSINT entity: SOL-USD short signal
domain: finance
tags: ["symbol", "direction", "confidence", "timestamp", "pnl_percent", "risk_score"]
source: algo_detection
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"symbol": "SOL-USD", "direction": "short", "confidence": 0.8, "timestamp": "2026-01-18", "pnl_percent": 44.7, "risk_score": 55}


id: signal_007
name: SOL-USD long signal
type_ref: trading_signal
status: active
description: OSINT entity: SOL-USD long signal
domain: finance
tags: ["symbol", "direction", "confidence", "timestamp", "pnl_percent", "risk_score"]
source: algo_detection
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"symbol": "SOL-USD", "direction": "long", "confidence": 0.57, "timestamp": "2024-02-29", "pnl_percent": 19.8, "risk_score": 54}


id: signal_008
name: AAPL short signal
type_ref: trading_signal
status: active
description: OSINT entity: AAPL short signal
domain: finance
tags: ["symbol", "direction", "confidence", "timestamp", "pnl_percent", "risk_score"]
source: algo_detection
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"symbol": "AAPL", "direction": "long", "confidence": 0.43, "timestamp": "2025-05-03", "pnl_percent": 15.2, "risk_score": 53}


id: wallet_bridge
name: Bridge Wallet BTC
type_ref: crypto_wallet
status: active
description: OSINT entity: Bridge Wallet BTC
domain: cybersecurity
tags: ["currency", "address", "balance", "first_tx", "last_tx", "risk_score", "note"]
source: blockchain_analysis
created_at: 2026-04-02T19:07:38Z
updated_at: 2026-04-02T19:07:38Z
metadata:
{"currency": "BTC", "address": "1K7ELkqPG3Qkmajg6MsPYpTUuEc99ENR63", "balance": 0.15, "first_tx": "2024-09-01", "last_tx": "2025-11-10", "risk_score": 78, "note": "Links APT laundering to insider trading payments"}


