Features

Intelligence Storage & Organization

Schema

• Utilizes STIX (Structured Threat Information eXpression)
  • Creates atomic intelligence objects reusable across multiple contexts
  • Tracks relationships among objects (e.g., linking threat actors to specific malware)

Logical Grouping

• TAXII Collections: Broad thematic categories (e.g., "Android Malware")
• Reports: Detailed narratives containing collections of related intelligence objects (e.g., "Release of Android Mega RAT")
• Flexibility allowing STIX objects to exist simultaneously in multiple TAXII collections and reports

Physical Grouping

• Supports data segregation through separate PIARA instances based on data ingestion methods (manual vs automated)
• Ability to access and integrate data from multiple PIARA instances

Object Lifecycle & Collaboration

Metadata Management

• Workflow tracking metadata:
  • Status tracking ("To Do", "In Progress", "Done", "Published")
  • Assignee identification (assignable to any system user)
  • Priority levels ("Low", "Medium", "High")
• Facilitates collaboration through clear task assignment and status management

Task Tracking & Management

• Dedicated "Task" object type for:
  • Progress monitoring
  • Exchanging RFIs (Requests for Information)
  • Assigning scope items or research tasks
  • Managing analyst to-do lists
• Kanban visual workflow management

Object Publishing & Versioning

• Version control exclusively for "Published" objects
• Non-editable status for published objects; modifications trigger new editable versions
• Continuous enrichment capability; no "final" versions, with latest timestamp indicating current object state

Query & Filtering

• Advanced graphical query builder
• Text-based query builder with intuitive PiaraQL
• Faceted filtering
• Query initiation directly from any data object within PIARA
• Capability to save queries and configure alerts for new results

Alerting System

• Integrated alerts within PIARA
• Alerts distributed via:
  • Email
  • Zulip
  • Wickr

Object Creation & Enhancement

Web Application Capabilities

• Create new objects from scratch
• Derive new objects from existing objects
• Generate objects from query results
• AI-assisted object creation from media sources
• Built-in Computer-Assisted Translation (CAT) for precise translations
• Machine Translation (MT) for bulk translations
• Integrated AI assistance across operations

API Integration

• Synchronous API for straightforward automated object creation
• Asynchronous API for performance-oriented, low latency workflows

Automatic Object Enhancement

• Automated translations
• AI-enhanced textual intelligence
• AI-driven intelligence extraction from media
  

Supported Technologies

• OpenAI: Advanced language processing and AI-driven enhancements
• Ollama: Open-source platform enabling easy deployment and management of large language models locally or in private environments
• Google Gemini: Google's latest generative AI capabilities for precise intelligence extraction and content enrichment
• Azure AI Translator: Cloud-based translation service by Microsoft for rapid and accurate text translations
• SYSTRAN Pure Neural Server and Translation Server: High-performance translation servers for enterprise-grade translations
• Webz.io: Real-time web data extraction

Risk Assessment & Management

• Creation and computation of "Risk Scenario" assessments
• Adheres to Open FAIR standards

Intelligence Distribution

• Use as client-facing intelligence portal
• Export capabilities to DOCX, CSV, JSON formats
• Direct email distribution to pre-defined lists
• Access and import intelligence from other PIARA instances
• Mesh architecture enabling seamless multi-instance data integration
• Compliant with TAXII (Trusted Automated eXchange of Intelligence Information) 2.x standard

Intelligence Monetization

• Operate as a marketplace for intelligence assets
• Integration with PIARA-based intelligence marketplaces
• API-based billing and monetization facilitated through Stripe