Production cadence
New indicators per day, last 30 — by category.
- C2
- Phishing
- Payload staging
- IAB
- Attribution
CICS · SENTINEL · PREEMPTIVE INTELLIGENCE
Adversarial infrastructure, observed before it lands.
NO HAFÄCHÄS. PREEMPTIVE SIGNAL.
What we see, when we saw it, and how far ahead of any public source.
72,677
Total predictions · 90d
72,624
Malicious predicted
53
Unknown
0
Missed threats
5
Categories tracked
86
Public confirmations
26d
Median lead time
What this is
SENTINEL detects adversarial infrastructure during its staging phase — the days and weeks before an attack reaches anyone's network. The output is not retrospective IOCs but preemptive indicators of operations being prepared.
This page is the public record of that work: what was observed, when, and how many days ahead of the first public source. Each indicator carries a decay score that reflects how actionable it still is, expiring at a rate set by its type.
Indicators we produced
Four views on what SENTINEL is observing right now.
Lead time trend
7-day rolling mean of max public-source lead time, last 90 days.
Lead time distribution
How many days SENTINEL was ahead of the first public source, across all indicators.
0-4d
2
5-9d
0
10-14d
8
15-19d
31
20-29d
24
30-44d
21
45-59d
0
60d+
9
Corpus trail
Live coverage over the last 90 days — bronze is currently tracked, green is the cumulative burn record.
- Active
- Burned (cumulative)
Recently burned
Clusters that went dark — indicator values now disclosed alongside the public confirmations that caught up.
| Indicator ID | Family | Lead | Burned | Confidence | Status |
|---|---|---|---|---|---|
| SNT-C2-2026-05-EC05 | — | +15d | 2026-05-23 | Confirmed | Burned |
| SNT-C2-2026-05-847D | — | +15d | 2026-05-23 | Confirmed | Burned |
| SNT-C2-2026-05-5641 | — | +27d | 2026-05-23 | Confirmed | Burned |
| SNT-C2-2026-05-092D | — | +29d | 2026-05-23 | Confirmed | Burned |
| SNT-C2-2026-05-C4D2 | — | +29d | 2026-05-23 | Confirmed | Burned |
| SNT-C2-2026-05-DBC8 | — | +29d | 2026-05-23 | Confirmed | Burned |
| SNT-C2-2026-05-84D5 | — | — | 2026-05-23 | Confirmed | Burned |
| SNT-C2-2026-05-684D | — | — | 2026-05-23 | Confirmed | Burned |
| SNT-C2-2026-05-6A9D | — | — | 2026-05-23 | Confirmed | Burned |
| SNT-C2-2026-05-816C | — | — | 2026-05-23 | Confirmed | Burned |
Most successful predictions
Two cuts on what SENTINEL got right earliest and what the public eventually confirmed most loudly.
Longest ahead
Indicators where SENTINEL led the first public source by the most days.
| Indicator ID | Family | Lead | First observed | Confidence | Status |
|---|---|---|---|---|---|
| SNT-C2-2026-05-F635 | — | +32d | 2026-05-19 | Probable | Burned |
| SNT-C2-2026-05-CC76 | — | +32d | 2026-05-19 | Confirmed | Burned |
| SNT-C2-2026-05-0798 | — | +32d | 2026-05-19 | Confirmed | Burned |
| SNT-C2-2026-05-6224 | — | +32d | 2026-05-19 | Confirmed | Burned |
| SNT-C2-2026-05-5159 | — | +32d | 2026-05-19 | Confirmed | Burned |
| SNT-C2-2026-05-C9DB | — | +31d | 2026-05-19 | Confirmed | Burned |
| SNT-C2-2026-05-E5B4 | — | +31d | 2026-05-19 | Confirmed | Burned |
| SNT-C2-2026-05-4899 | — | +31d | 2026-05-19 | Probable | Burned |
| SNT-C2-2026-05-E1F5 | — | +31d | 2026-05-19 | Confirmed | Burned |
| SNT-C2-2026-05-C2E3 | — | +31d | 2026-05-19 | Confirmed | Burned |
Most cited
Indicators that ended up referenced by the most independent public sources.
| Indicator ID | Family | Lead | First observed | Confidence | Status |
|---|---|---|---|---|---|
| SNT-C2-2026-05-F635 | — | +32d | 2026-05-19 | Probable | Burned |
| SNT-C2-2026-05-CC76 | — | +32d | 2026-05-19 | Confirmed | Burned |
| SNT-C2-2026-05-0798 | — | +32d | 2026-05-19 | Confirmed | Burned |
| SNT-C2-2026-05-6224 | — | +32d | 2026-05-19 | Confirmed | Burned |
| SNT-C2-2026-05-5159 | — | +32d | 2026-05-19 | Confirmed | Burned |
| SNT-C2-2026-05-C9DB | — | +31d | 2026-05-19 | Confirmed | Burned |
| SNT-C2-2026-05-E5B4 | — | +31d | 2026-05-19 | Confirmed | Burned |
| SNT-C2-2026-05-4899 | — | +31d | 2026-05-19 | Probable | Burned |
| SNT-C2-2026-05-E1F5 | — | +31d | 2026-05-19 | Confirmed | Burned |
| SNT-C2-2026-05-C2E3 | — | +31d | 2026-05-19 | Confirmed | Burned |
Search the record
Look up an indicator ID, family name, actor cluster, or a URL from a public source. Substring match across the catalogue.