psyc operations cockpit model
NN-sc — Security/Control

Response Actions

5208 proposed · 8 enforced · 0 declined

When a high-severity case lands, psyc proposes what to do about it — alert the SOC, push its IOCs to the perimeter firewall + DNS. Nothing fires on its own: you approve, psyc enforces, the ledger records it. Detection that acts, with a human on the trigger.

how to use this view

How to use. Each proposed action is one defensive move. Hit ⚡ Enforce to fire it (and enjoy the disco), or Decline to drop it. Both decisions are logged to the immutable ledger.

What you're seeing. Actions generated by Respondline for HIGH/CRITICAL cases. The frozen payload is exactly what gets pushed to the enforcement sink on approval.

Why it matters. Closing the loop — intel → decision → enforcement → audit — is what separates a threat viewer from a threat response platform. The human gate keeps automation safe.

#TypeCaseSevWhat it doesStatusAction
#4225 alert PSYC-URLHAUS-3863310 high Alert SOC: HIGH malware — URLhaus: malware_download at 61.52.212.177 (tags: 32-bit, elf, mips, Mozi) executed operator
#3949 alert PSYC-URLHAUS-3863087 high Alert SOC: HIGH malware — URLhaus: malware_download at 31.56.209.84 (tags: botnet, mirai) executed operator
#3947 alert PSYC-URLHAUS-3863085 high Alert SOC: HIGH malware — URLhaus: malware_download at 45.13.186.32 (tags: censys, elf, mirai, ua-wget) executed operator
#3945 alert PSYC-URLHAUS-3863079 high Alert SOC: HIGH malware — URLhaus: malware_download at 45.13.186.32 (tags: censys, elf, ua-wget) executed operator
#3943 alert PSYC-URLHAUS-3863080 high Alert SOC: HIGH malware — URLhaus: malware_download at 45.13.186.32 (tags: censys, elf, mirai, ua-wget) executed operator
#3941 alert PSYC-URLHAUS-3863081 high Alert SOC: HIGH malware — URLhaus: malware_download at 45.13.186.32 (tags: censys, elf, ua-wget) executed operator
#3939 alert PSYC-URLHAUS-3863082 high Alert SOC: HIGH malware — URLhaus: malware_download at 45.13.186.32 (tags: censys, elf, mirai, ua-wget) executed operator
#112 blocklist PSYC-URLHAUS-3859899 high Block 0 IP(s), 1 domain(s), 1 URL(s) at the perimeter executed operator