New investigation

Intake brief

Define the target scope, drop in your seed indicators and pick the data sources F3T should sweep. The pipeline kicks off the moment your brief is approved.

Requester

Who is filing this brief.

Target scope

What the investigation is about.

Be specific about what is in and out of scope.

Seed indicators

One per line. Provide at least one category.

Preferred data sources

4 of 21 selected.

Infrastructure
Threat intel
Identity & breach
Web & social

Operator notes

Anything analysts should know.

Briefs are encrypted at rest. No third-party tracking.