Merged nodes can't be un-merged. To fix a mistake, change it in a new branch.

New branch

Forks main. Changes stay in the branch until you check and merge it.

Power-Ups

Storm examples

Written for our forms and tags. Insert puts one in the query box; nothing runs until you press Run.

Results as TOON


    

Keyboard keys

For the query results, whenever you aren't typing in a field. A count goes before j, k, gg or G: 5j moves five rows, 12G goes to row 12. Keys that run something put its Storm in the query bar.

Add a tag

Run a cti command

Its words without the prefix: branch new triage runs cti.branch.new triage, in the query bar.

Doc

New tag

Missing parents are created too. Give it a title to make it part of the taxonomy.

Set API key

Stored in the Cortex vault the Power-Up reads. It's never shown again: to change it, enter a new value. A blank field keeps its current value.

Add user

They get no password. Adding them issues a 30-day UI key, shown once, for you to send them privately.

UI key

Rename or move

Moves the tag and everything under it on every node, keeping tag time ranges. The old names stay as aliases that point at the new ones.

Capture from report

Creates the report, scrapes indicators (defanged is fine), links them with -(refs)> and copies the report's TLP onto new nodes.