Mythal · Concept 5 · Command Bridge

▸ HOSTILE INDICATORS

26Crit Open

4KEV

128Ransom

MYTHAL · COMMAND BRIDGE

TENANT MCR · MERIDIAN CONTINENTAL RAILWAY · CONCEPT 05

● AGENT FABRIC ONLINE ● KEV FEED LIVE ● 52 OT VETOS ● 4310 ASSETS

▸ FRIENDLY POSTURE

18mMTR

240Patches 24h

1024Evidence

▸ AGENT ROSTER · 12 SPECIALISTS

★01Supervisor 8

02Scanner Liaison312

03Threat Intel298

04Patch Hunter256

05Impact Analyst241

06Change Risk238

★07OT Safety Officer 82

08Planner156

09Executor240

10Verifier240

11Compliance1024

★12Inventory Insights2087

▸ EXTERNAL FEEDS · LIVE

CISA KEV1602

NVDSYNC

Qualys VMDROK

Defender VMOK

Claroty xDomeOK

Rapid7 InsightVMDEG

▸ ESTATE SITUATIONAL AWARENESS · ZONE GRAPH

Clean Open finding KEV / Critical OT zone

▸ PRIORITY ALERTS · DUE

CVE-2024-37079

VMware ESXi · 24 hosts · CCS

RANSOMWARE OPERATORS EXPLOITING. KEV-listed. Due 2024-08-20.

CVE-2024-3400

PAN-OS GlobalProtect · 45 fw

CRITICAL 10.0. Active in the wild. Patch available.

CVE-2023-22515

Atlassian Confluence · 8 inst

Broken access control. Ransomware-associated.

CVE-2022-26143

Siemens RUGGEDCOM · 23 OT CCS

SSH auth bypass. OT VETO ACTIVE. Compensating controls in place.

CVE-2021-44228

log4j · CLOSED · 8 hosts

Log4Shell. Remediated. Evidence emitted to TSA.

CVE-2024-21887

Ivanti Connect Secure · 3 VPN

Cmd injection. Ransomware ops actively using.

CVE-2023-20198

Cisco IOS-XE · CLOSED · 12 sw

Web UI privilege escalation. Patched in last window.

▸ AGENT ACTIVITY · LIVE FEED · TICK 2.5s

14:32:07ot_safetyVETO CVE-2024-37079 mcr-vcenter-east-014 → 3 compensating controls deployed

14:32:06scannerINGEST 12 findings from Qualys · normalized to canonical schema

14:32:05verifierPASS CVE-2023-22515 mcr-mw-eng-0042 · rescan clean · health probe 200

14:32:04executorAPPLIED SCCM push complete · KB-5052041 on 17 corp-exchange hosts

14:32:03complianceEVIDENCE 3 units NIST CSF RS.MI-01 · TSA §3.D · IEC 62443-2-3

14:32:02threat_intelENRICH CVE-2024-3400 KEV=true EPSS=0.84 ransomware=true

14:32:01patch_hunterFIX PAN-OS 11.1.3 → 11.1.4 reliability=0.91 vendor

14:32:00impactSCORE 45 PAN-OS firewalls affected · 12 internet-facing critical

▸ AGENT ROSTER · 12 SPECIALISTS

▸ EXTERNAL FEEDS · LIVE

▸ ESTATE SITUATIONAL AWARENESS · ZONE GRAPH

▸ PRIORITY ALERTS · DUE

▸ AGENT ACTIVITY · LIVE FEED · TICK 2.5s

▸ COMMAND CONSOLE