Case studies

Real-world walkthroughs showing how structured threat intelligence can be applied to investigations, enrichment, and graph analysis.

Graphing Credit Card Data Leaks Using STIX 2.1 Objects

Case studies August 18, 2025

Turn card numbers into STIX 2.1 objects. Enrich the data with issuer information. Track transactions made by the card. Then link the cards and transactions to other STIX objects in your research (Actors, Incidents, etc.).
Graphing the Ransomware Payment Ecosystem using STIX Objects

Case studies July 14, 2025

I recently conducted a project to identify the most prolific ransomware based on the ransom payments being made. Let me walk you through how I did it.