تدقيق الجولة

لا توجد تناقضات مسجلة لهذه الجولة.

• {"Notes":"Preserve vendor mappings as relations, not equivalence.","Gap ID":"CY-GAP-0801","Impact":"Blocks safe actor-alias merge and attribution transfer.","Status":"OPEN","Gap Type":"ACTOR_ALIAS_CROSSWALK","Priority":"HIGH","Domain ID":"CY-DOM-008","Topic IDs":"CY-TOP-0801,CY-TOP-AIS-001","Description":"Independent cross-vendor identity resolution is incomplete across GTIG UNC7228, Microsoft Storm-0940, Wiz overlap labels, CrowdStrike VAPOR PANDA and unattributed ARTEX clusters.","Last Reviewed":"2026-11-01","Resolution Run":"ACRIP-TAI-20261101-001","Required Evidence / Resolution":"Independent shared victim/event artifacts, infrastructure-control evidence, malware/tooling lineage and provider telemetry with time correlation."}
• {"Notes":"Static IOC overlap alone is insufficient.","Gap ID":"CY-GAP-0802","Impact":"Blocks durable infrastructure ownership and cross-campaign continuity claims.","Status":"OPEN","Gap Type":"INFRASTRUCTURE_PROVENANCE_CONTINUITY","Priority":"HIGH","Domain ID":"CY-DOM-008","Topic IDs":"CY-TOP-0801,CY-TOP-AIS-001,CY-TOP-CSS-001","Description":"Public evidence does not fully resolve ownership/control, compromise state and first/last-seen continuity for ARTEX controllers, proxies and campaign C2 across clusters.","Last Reviewed":"2026-11-01","Resolution Run":"ACRIP-TAI-20261101-001","Required Evidence / Resolution":"Passive DNS, RDAP/WHOIS history, CT, provider logs and time-bounded controller artifacts."}