PIARA Features

Intelligence Storage & Organization

Schema

  • Utilizes STIX (Structured Threat Information eXpression)

    • Creates atomic intelligence objects reusable across multiple contexts

    • Tracks relationships among objects (e.g., linking threat actors to specific malware)

Logical Grouping

  • TAXII Collections: Broad thematic categories (e.g., "Android Malware")

  • Reports: Detailed narratives containing collections of related intelligence objects (e.g., "Release of Android Mega RAT")

  • Flexibility allowing STIX objects to exist simultaneously in multiple TAXII collections and reports

Physical Grouping

  • Supports data segregation through separate PIARA instances based on data ingestion methods (manual vs automated)

  • Ability to access and integrate data from multiple PIARA instances

Object Lifecycle & Collaboration

Metadata Management

  • Workflow tracking metadata:

    • Status tracking ("To Do", "In Progress", "Done", "Published")

    • Assignee identification (assignable to any system user)

    • Priority levels ("Low", "Medium", "High")

  • Facilitates collaboration through clear task assignment and status management

Task Tracking & Management

  • Dedicated "Task" object type for:

    • Progress monitoring

    • Exchanging RFIs (Requests for Information)

    • Assigning scope items or research tasks

    • Managing analyst to-do lists

  • Kanban visual workflow management

Object Publishing & Versioning

  • Version control exclusively for "Published" objects

  • Non-editable status for published objects; modifications trigger new editable versions

  • Continuous enrichment capability; no "final" versions, with latest timestamp indicating current object state

Query & Filtering

  • Advanced graphical query builder

  • Text-based query builder with intuitive PiaraQL

  • Faceted filtering

  • Query initiation directly from any data object within PIARA

  • Capability to save queries and configure alerts for new results

Alerting System

  • Integrated alerts within PIARA

  • Alerts distributed via:

Object Creation & Enhancement

Web Application Capabilities

  • Create new objects from scratch

  • Derive new objects from existing objects

  • Generate objects from query results

  • AI-assisted object creation from media sources

  • Built-in Computer-Assisted Translation (CAT) for precise translations

  • Machine Translation (MT) for bulk translations

  • Integrated AI assistance across operations

API Integration

  • Synchronous API for straightforward automated object creation

  • Asynchronous API for performance-oriented, low latency workflows

Automatic Object Enhancement

  • Automated translations

  • AI-enhanced textual intelligence

  • AI-driven intelligence extraction from media\

Supported Technologies

  • OpenAI: Advanced language processing and AI-driven enhancements

  • Ollama: Open-source platform enabling easy deployment and management of large language models locally or in private environments

  • Google Gemini: Google's latest generative AI capabilities for precise intelligence extraction and content enrichment

  • Azure AI Translator: Cloud-based translation service by Microsoft for rapid and accurate text translations

  • SYSTRAN Pure Neural Server and Translation Server: High-performance translation servers for enterprise-grade translations

  • Webz.io: Real-time web data extraction

Risk Assessment & Management

  • Creation and computation of "Risk Scenario" assessments

  • Adheres to Open FAIR standards

Intelligence Distribution

  • Use as client-facing intelligence portal

  • Export capabilities to DOCX, CSV, JSON formats

  • Direct email distribution to pre-defined lists

  • Access and import intelligence from other PIARA instances

  • Mesh architecture enabling seamless multi-instance data integration

  • Compliant with TAXII (Trusted Automated eXchange of Intelligence Information) 2.x standard

Intelligence Monetization

  • Operate as a marketplace for intelligence assets

  • Integration with PIARA-based intelligence marketplaces

  • API-based billing and monetization facilitated through Stripe

Last updated