Using the Platform¶
This section is a practical guide to the TI Mindmap HUB web interface at ti-mindmap-hub.com. Each page explains what you see, what you can do, and how the content was produced.
AI-generated content
Summaries, mindmaps, IOCs, TTP mappings, STIX bundles, and briefings are generated by AI. Always verify critical information against the original source before operational use. See Known Limitations.
Public vs. Authenticated Pages¶
Most of the platform requires a free account. A few pages are open to everyone.
| Page | Path | Sign-in required |
|---|---|---|
| Sign-in screen | shown for any protected page | — |
| Landing page | /landingpage |
No |
| Research Project | /research |
No |
| Agentic Reports | /analytics, /analytics/{slug} |
No |
| Terms of Service / Privacy Policy | /terms, /privacy |
No |
| Everything else (dashboard, reports, search, graph, briefing, MCP, profile) | — | Yes |
If you open a link to a protected page while signed out, you see the sign-in screen. After you sign in, you are taken back to the page you originally requested. See Account & Access.
Navigation Map¶
The sidebar groups pages into four areas.
flowchart LR
subgraph Intelligence
TR[Threat Reports]
BA[AI Briefing Agent]
AR[Agentic Reports]
end
subgraph "Hunt & Explore"
IOC[IOC Search]
CVE[CVE Search]
TE[Threat Entities]
SB[STIX Bundles]
SC[STIX Constellation]
ST[Statistics]
end
subgraph Platform
MCP[MCP Server]
SA[Submit Article]
RP[Research Project]
RM[Roadmap]
AB[About]
end
subgraph "Support & Links"
FB[Feedback]
GH[GitHub Repository]
DOC[Documentation]
end
| Sidebar entry | What it is for | Guide |
|---|---|---|
| Threat Reports | Browse and search every processed report | Threat Reports Dashboard |
| (open any report) | 12-tab analysis of a single report | Report View |
| AI Briefing Agent | Weekly AI-generated threat landscape | Weekly Briefing |
| Agentic Reports | Cross-source deep-dive analyses (public) | Agentic Reports |
| IOC Search | Look up indicators, bulk triage, CSV export | IOC Search |
| CVE Search | Vulnerabilities with KEV/EPSS context, patch priority | CVE Search |
| Threat Entities | Actor, malware, tool, and campaign profiles | Threat Entities |
| STIX Bundles | Browse, preview, and download STIX 2.1 bundles | STIX Bundles |
| STIX Constellation | Interactive cross-report knowledge graph | STIX Constellation |
| Statistics | Platform-wide metrics and charts | Statistics |
| MCP Server | Connect AI assistants to the platform | MCP |
| Submit Article | Propose a new report for analysis | Submit an Article |
| Research Project, Roadmap, About | Project context and plans | Account & Access |
| Feedback | Contact channels, issues, discussions | Account & Access |
The user menu (top right) gives access to My Profile, where you manage your profile, newsletter subscription, and MCP API keys.
Typical Workflows¶
Triage a new threat report¶
- Find the report in Threat Reports (or submit it)
- Read AI Summary, TI Mindmap, and 5W Context in the Report View
- Review IOCs, CVEs, and TTP Catalog
- Export the STIX bundle, MISP event, or PDF
Check whether an indicator is known¶
- Paste it into IOC Search — or paste up to 500 indicators into Bulk IOC Triage
- Open the matching reports and linked entities
Prioritise patching¶
- Open CVE Search and review Patch Priority
- Filter results with Only CISA KEV
- Open the reports that mention each CVE for context
Profile an adversary¶
- Search the actor in Threat Entities
- Review exploited CVEs, ATT&CK techniques, and associated IOCs on the profile
- Explore relationships in the STIX Constellation
Stay current¶
- Read the latest Weekly Briefing
- Browse Agentic Reports for deep dives
- Subscribe to the weekly newsletter in My Profile
How the Content Is Produced¶
Every page in this section includes a short "How it's generated" note. For the full picture, see:
- How Content Is Generated — one-page overview for end users
- Processing Methodology — detailed pipeline stages
- Known Limitations — what to verify and why