First-appearance watch over the shared MENA corpus — actors, malware, C2 infrastructure and brand-impersonation lookalikes seen for the first time in the selected window. Distinct from Radar Signals, which tracks momentum (spike vs. baseline); this surface tracks emergence — the day something new enters the picture.
Field of view: this collection is deliberately scoped to MENA-focused OSINT — an item appearing here means first observed in our collection, never first to exist. An absence here means not observed in our collection, never not a threat.