Intellescope
News
Features, capabilities, walkthroughs, and direction — how the product works and how to use it. Shipped-change notes live on Releases.
- WalkthroughThe clock is an input: how an unpinned timestamp lied to us four timesA scoring engine that weighs evidence by age has a second input besides the evidence — the clock. We hit the same bug four times before we named it, and every time it returned a plausible number instead of an error.
- WalkthroughField note: MalwareBazaar's API no longer carries listing-time detectionA short negative result for anyone reconstructing hash lead-time. The VirusTotal ratio recorded when a sample was listed is gone from the query API — zero of forty samples carried it. We're publishing the dead end so you don't have to find it yourself.
- WalkthroughWe measured our own hash verdicts, found three defects, and fixed themThree defects the measurement found in our own scoring, and what we changed to fix them — including the claims we had to retract.
- DirectionThe score should reason like an analystHow we wanted threat scoring to work: weigh the sources, admit the uncertainty, and get better with experience — not tally votes or guess.
- DirectionSupervised autonomy: guide the AI, don't fear itThere are two ways to build "the human approves the action." One comes from fear. We built the other.
- DirectionThreat verdicts you can proveWhy every score is explainable and reproducible — and why we won't let the AI pull the trigger.
- CapabilityThe miss matters more than the blockA known-bad that slipped past your controls is not the same event as one you stopped. Here's why it rises to the top.
- CapabilitySee why, not just whatA score tells you what. The evidence tells you why. We show both, on every verdict.
- WalkthroughHow to read a verdictA two-minute tour of what you're looking at when you open an indicator — score, evidence, confidence, and what to do next.
- FeatureHand it an indicator, get back a caseThe Lookup agent does the research an analyst would — pulls the sources, reads them, extracts the indicators, and shows its work.