Update log
Only new features and meaningful changes are recorded here. Small technical fixes are omitted.
Latest update: 24 July 2026
Ransomware and data leak claims published on open sources are collected as soon as the page opens, with organization, group, sector, country, date, and source count in one list.
New, updated, and removed claims are marked by comparing against the previous collection, and records seen on more than one independent source are shown separately.
Canonical, language alternate, and social sharing metadata are now consistent across the Turkish and English pages.
The sitemap now covers public tools, resources, and case pages while private workspaces remain outside the search index.
Raw email headers and EML files are inspected in the browser; the file and header text are not sent to a server.
The server chain is separated from the SPF, DKIM, DMARC, and ARC results reported in the header. Those values are not treated as proof that an email is safe.
Explicit IP, domain, URL, hash, CVE, and email records are extracted from logs, reports, and incident notes with their line context.
Records are normalized, duplicates are merged, and a defanged view is available for safer sharing.
The decision page now shows an interactive research tree with a trunk, branches, and leaves; the chosen path stays visible from trunk to leaf.
On desktop the tree can be tilted and zoomed gently; on phones and with reduced motion the same flow runs in a plain vertical view.
Verified campaigns can now produce draft Sigma, Suricata, YARA, KQL, and Splunk content together with IOCs, ATT&CK techniques, sources, and an expiry date.
The package is shown for review first. It cannot be downloaded without approval and no rule is ever pushed to a live security system automatically.
Case entities, evidence-backed relations, approximate locations, record times, and evidence references can now be reviewed in one workspace.
Proposed links are not treated as verified findings until an analyst reviews them.
Every page now shares one palette: warm paper ground, night-ink dark theme, ledger-blue links, and rust accents; headlines are set in a serif voice.
The homepage became an editorial front page: three numbered start paths, a featured case dossier, recent case readings, and the desk journal in one flow.
