NOCTLABS← All projects
PROJECT 004 / THREATWEAVERINTERNAL PROTOTYPE

ThreatWeaver

Find the thread.
Keep the context.

An experiment in bringing threat reporting, sources, indicators, and research briefs into one working space.

Pull on the thread
SOURCE DESK / 004ThreatWeaver’s actual RSS feed-management interface, with local sample feeds
SOURCES → CONTEXT → A BRIEFTW / 004

THE RESEARCH PROBLEM

Useful reporting.
Scattered everywhere.

A feed gives you the next article. The research comes afterward: deciding what matters, following the source, checking an indicator, and remembering why a piece belonged in the brief.

ThreatWeaver explores that middle space. It collects the reporting and keeps analysis, context, and report preparation close to the source material.

HOW THE THREAD IS WOVEN

Gather. Examine.
Make something useful.

  1. 01 / GATHER

    Bring in the sources.

    Manage RSS feeds and group them into bundles for a topic or area of interest.

  2. 02 / ANALYZE

    Get a first read.

    AI-assisted summaries, relevance scoring, and structured analysis help organize the reporting.

  3. 03 / INSPECT

    Look at the details.

    Extract indicators, keep their surrounding context, and manage duplicates and suppressions.

  4. 04 / BRIEF

    Shape the output.

    Choose sources, a date range, and a template. Review the material and export a report.

THE ACTUAL WORKSPACE

A desk for sources.
Room to follow through.

Feed management and report setup, captured from the application. These views use local sample feeds and configuration.

Full size ↗
Actual ThreatWeaver RSS Feeds interface with sample feed data
The source desk · subscribed feeds, tags, and per-source actions.

THE RESEARCH BECOMES SOMETHING

A brief
you can shape.

A report is an editorial choice. Which sources belong? How far back should it look? Which details help the reader?

THREATWEAVER / REPORT RECIPE004
Scope
A topic, a date range, selected feeds or bundles.
Selection
Feed and scoring settings, or manually chosen articles.
Structure
A template, report sections, and branding choices.
Output
Markdown, HTML, or PDF.
SOURCE MATERIAL STAYS PART OF THE PROCESS.

UNDER THE HOOD

Less tab-sprawl.
More continuity.

01

A frontend for the research workflow.

Vue and TypeScript provide the feed desk, article views, report controls, and settings.

02

Collection and analysis behind the scenes.

A Node service handles feeds, stored articles, indicator extraction, and Anthropic-powered analysis.

03

The analyst still shapes the brief.

Source selection, report review, and template controls keep the output open to inspection and editing.

ON THE WORKBENCH

An internal prototype designed for trusted-network use. This page is a look inside the project; there’s no public hosted instance to sign into.

ANOTHER THREAD TO FOLLOWShinyHunter