Skip to content

Using the Platform

This section is a practical guide to the TI Mindmap HUB web interface at ti-mindmap-hub.com. Each page explains what you see, what you can do, and how the content was produced.

AI-generated content

Summaries, mindmaps, IOCs, TTP mappings, STIX bundles, and briefings are generated by AI. Always verify critical information against the original source before operational use. See Known Limitations.


Public vs. Authenticated Pages

Most of the platform requires a free account. A few pages are open to everyone.

Page Path Sign-in required
Sign-in screen shown for any protected page —
Landing page /landingpage No
Research Project /research No
Agentic Reports /analytics, /analytics/{slug} No
Terms of Service / Privacy Policy /terms, /privacy No
Everything else (dashboard, reports, search, graph, briefing, MCP, profile) — Yes

If you open a link to a protected page while signed out, you see the sign-in screen. After you sign in, you are taken back to the page you originally requested. See Account & Access.


The sidebar groups pages into four areas.

flowchart LR
    subgraph Intelligence
        TR[Threat Reports]
        BA[AI Briefing Agent]
        AR[Agentic Reports]
    end
    subgraph "Hunt & Explore"
        IOC[IOC Search]
        CVE[CVE Search]
        TE[Threat Entities]
        SB[STIX Bundles]
        SC[STIX Constellation]
        ST[Statistics]
    end
    subgraph Platform
        MCP[MCP Server]
        SA[Submit Article]
        RP[Research Project]
        RM[Roadmap]
        AB[About]
    end
    subgraph "Support & Links"
        FB[Feedback]
        GH[GitHub Repository]
        DOC[Documentation]
    end
Sidebar entry What it is for Guide
Threat Reports Browse and search every processed report Threat Reports Dashboard
(open any report) 12-tab analysis of a single report Report View
AI Briefing Agent Weekly AI-generated threat landscape Weekly Briefing
Agentic Reports Cross-source deep-dive analyses (public) Agentic Reports
IOC Search Look up indicators, bulk triage, CSV export IOC Search
CVE Search Vulnerabilities with KEV/EPSS context, patch priority CVE Search
Threat Entities Actor, malware, tool, and campaign profiles Threat Entities
STIX Bundles Browse, preview, and download STIX 2.1 bundles STIX Bundles
STIX Constellation Interactive cross-report knowledge graph STIX Constellation
Statistics Platform-wide metrics and charts Statistics
MCP Server Connect AI assistants to the platform MCP
Submit Article Propose a new report for analysis Submit an Article
Research Project, Roadmap, About Project context and plans Account & Access
Feedback Contact channels, issues, discussions Account & Access

The user menu (top right) gives access to My Profile, where you manage your profile, newsletter subscription, and MCP API keys.


Typical Workflows

Triage a new threat report

  1. Find the report in Threat Reports (or submit it)
  2. Read AI Summary, TI Mindmap, and 5W Context in the Report View
  3. Review IOCs, CVEs, and TTP Catalog
  4. Export the STIX bundle, MISP event, or PDF

Check whether an indicator is known

  1. Paste it into IOC Search — or paste up to 500 indicators into Bulk IOC Triage
  2. Open the matching reports and linked entities

Prioritise patching

  1. Open CVE Search and review Patch Priority
  2. Filter results with Only CISA KEV
  3. Open the reports that mention each CVE for context

Profile an adversary

  1. Search the actor in Threat Entities
  2. Review exploited CVEs, ATT&CK techniques, and associated IOCs on the profile
  3. Explore relationships in the STIX Constellation

Stay current

  1. Read the latest Weekly Briefing
  2. Browse Agentic Reports for deep dives
  3. Subscribe to the weekly newsletter in My Profile

How the Content Is Produced

Every page in this section includes a short "How it's generated" note. For the full picture, see: