RaqibCTI

Attribution Changelog

new7 transitions · 14-day window

How Radar's attribution to a cluster matures — candidate → corroborated → named, actors added or dropped, activity that goes quiet or comes back. Distinct from Correlated Activity, which shows each cluster's current state; this shows how it got there, one attribution run at a time.
Field of view: transitions reflect changes observed in our collection, not the ground truth of what an actor actually did — a gap here means Radar didn't see a change, not that nothing changed.

Observed in our collection, not ground truth — a transition appears here the run Radar's correlation noticed it, which can lag the real-world change by days.

Sep 19, 2026 · 1 transition
06:09
SparrowDoorcorroborated
CandidateCorroborated
Sep 18, 2026 · 1 transition
06:09
CorroboratedCandidateQilin (fka Agenda)DragonForceRhysida
Sep 16, 2026 · 2 transitions
06:09
infostealercorroborated
CandidateCorroborated
06:09
Cyclops Blinkcorroborated
CandidateCorroborated
Sep 15, 2026 · 1 transition
06:09
Cyclops Blinkcandidate
CorroboratedCandidate
Sep 13, 2026 · 1 transition
06:09
Cyclops Blinkcorroborated
CandidateCorroborated
Sep 11, 2026 · 1 transition
06:09
msgbox.execorroborated
CandidateCorroborated