TriAXIS
Admin Portal
SOC Analyst
{{ r.icon }}
{{ r.label }}
TriAXIS
{{ n.label }}

Unified Risk Dashboard

Global Risk
78
High
Last Correlated: 06:03 · Last 24 Hours
Monitored Assets
142 Int · 38 Ext
Active IOCs
3.805
Critical Priorities
14
Auto-Triage
99,4%
Monitored Assets
142 Int · 38 Ext
Active IOCs
3.805
Critical Priorities
14
Auto-Triage
99,4%

Priority Risk Queue

6 Findings
RPS
Axis
Findings
Signal
Severity
{{ f.rps }}
RPS
{{ f.title }}
{{ f.asset }}
{{ b.t }}
{{ f.severity }}

Risk trend · 30 days

78 High
100500
30 Days agoNow

Severity distribution

{{ s.label }}
{{ s.count }}
Internal Vulnerability
218
Open Vulnerabilities
9
Critical
External Attack Surface
38
External Assets
5
Shadow
Cyber Threat Intelligence
3.805
Active IOCs
14
C2 Tracked

Internal Vulnerability Management

Scheduled scanning & Auto-Triage of internal ICT asset vulnerabilities.

{{ k.label }}
{{ k.value }}
Scan Coverage
93%
Scanned
SIEM Sources
{{ s.n }}
Next scan at 22:00
Findings
Severity
Title
Host
Verdict
KEV
Status
{{ r.sev }}
{{ r.title }}
{{ r.host }}
{{ r.v }}{{ r.conf }}
KEV
{{ r.status }}
Internal Assets · 142
Host
Type
Zone
Vulnerabilities
Last scan
Risk
{{ r.host }}
{{ r.kind }}
{{ r.zone }}
{{ r.vuln }}
{{ r.scan }}
{{ r.risk }}
Scan History & ScheduleDaily 22:00 · credentialed weekly
Scan
Time
Scope
Findings
Status
{{ r.name }}
{{ r.when }}
{{ r.scope }}
{{ r.found }}
{{ r.status }}
Remediation & Tickets
Item
Host / target
Owner
SLA
Status
{{ r.item }}
{{ r.host }}
{{ r.owner }}
{{ r.sla }}
{{ r.s }}

External Attack Surface

Assess the internet-facing assets of AHU from an attacker's perspective + Digital Risk Protection.

{{ k.label }}
{{ k.value }}
External Asset Inventory
Assets
Status
Host
Port
Certificate
Risk
{{ r.asset }}
{{ r.status }}
{{ r.tech }}
{{ r.port }}
{{ r.cert }}
{{ r.risk }}
Discovered Subdomains305 total · 8 shown
Subdomain
Resolution
IP
Managed
Risk
{{ r.sub }}
{{ r.res }}
{{ r.ip }}
{{ r.managed }}
{{ r.risk }}

Attack surface map

ahu.go.id · 8 assets
Critical High Low Shadow

Ports & certificates

Open ports
{{ p.p }} {{ p.n }}
TLS certificates
{{ c.label }} {{ c.n }}

Digital Risk Protection

{{ c.title }}{{ c.count }}
{{ it }}

Cyber Threat Intelligence

Aggregation of feeds & IOCs, exploit intelligence, actor profiling, and C2 tracking.

{{ k.label }}
{{ k.value }}
IOC FeedSensitive values obfuscated (defanged)
Indicators
Type
Source
Conf
Warning-list
First / Last
{{ r.ind }}
{{ r.type }}
{{ r.src }}
{{ r.conf }}
{{ r.warn }}
{{ r.seen }}
Exploit & Vulnerability Intelligence
CVE
Name
Severity
CVSS
EPSS
KEV
PoC
{{ r.cve }}
{{ r.name }}
{{ r.sev }}
{{ r.cvss }}
{{ r.epss }}
KEV
{{ r.poc }}
{{ a.name }}{{ a.alias }}
{{ a.target }}
{{ tp }}

MITRE ATT&CK — detection coverage

low → high
{{ col.label }}
C2 Tracker
IP
Signature
Source
First seen
Conf
{{ r.ip }}
{{ r.sig }}
{{ r.src }}
{{ r.seen }}
{{ r.conf }}
Analyst tools

Correlation Queue

All findings are correlated, sorted by the highest RPS.

RPS
Axis
Findings
Signal
Severity
{{ f.rps }}
RPS
{{ f.title }}
{{ f.asset }}
{{ b.t }}
{{ f.severity }}
No findings light up this axis in the selected range.

Agent Org Chart

Reporting lines, roles, and permissions across {{ ag.count }} active agents

{{ k.count }}/ {{ k.total }}
{{ k.label }}
Legend
{{ l.label }}
Click a node to open its spec, tools.md, and skills.md. Its reporting chain stays lit.

Integrations

Connect SIEMs, security tools, and threat intelligence providers. All credentials are encrypted at rest.

{{ k.label }}
{{ k.value }}
{{ k.note }}

{{ intg.catTitle }}

{{ intg.catSub }}

{{ c.mono }}
{{ c.pillText }}
{{ c.name }}
{{ c.desc }}
{{ ch.t }}

Telegram MTProto Account

Required for downloading large archives via MTProto. The Telegram account is shared platform-wide and managed in one place — connect it once in Settings and it works here and in Dark Web Monitor.

Connected as dark code
Shared global Telegram account (used by Stealer Intelligence & Dark Web Monitor)
Connected

Monitored Channels

Channels are polled every N minutes (configurable). Each new ZIP/7z attachment is queued for download and extraction.

No channels yet. Click "Add channel" with a @username, t.me link, or numeric id.

Ingestion Queue

Live view of download and extract jobs. Updates every 3s.

No jobs in queue.
Stealer Log BatchesParsed credentials feed the CTI axis automatically
Batch
Lines
Credentials
New
Ingested
Status
{{ r.batch }}
{{ r.lines }}
{{ r.creds }}
{{ r.new }}
{{ r.when }}
{{ r.status }}
Combo Lists
File
Size
Lines
AHU hits
Added
{{ r.name }}
{{ r.size }}
{{ r.lines }}
{{ r.hits }}
{{ r.when }}
Import Batches
Batch ID
Source
Items
State
Started
{{ r.id }}
{{ r.src }}
{{ r.items }}
{{ r.state }}
{{ r.when }}

{{ emptyTitle }}

{{ emptyMsg }}
{{ t.msg }}