Attacker Clusters

Mirage groups individual attacks into coherent actor clusters by shared tooling, ATT&CK techniques and originating infrastructure.

Each cluster is a behavioural fingerprint spanning many source IPs. Explore the techniques, CVEs and networks that define active clusters, or watch them form live in the console.