Talon ThreatTalon Studio v1.0.2-beta
Explorer
One search box over every threat entity Talon knows — techniques, groups, campaigns, malware, mitigations, NIST controls and KEV CVEs — as a list or a force graph.
Searching
Explorer (/threat-intel/explorer) searches seven entity kinds at once by ID or name: Techniques, Threat groups, Campaigns, Malware & tools, Mitigations, NIST 800-53 controls and CVEs (from the CISA KEV catalogue). Results link where a page exists: a technique opens in Atlas, a group or campaign opens Adversaries already filtered to it, and a CVE opens Threat Intelligence.
Global reference data
Explorer searches Talon's synced ATT&CK, NIST and KEV reference data. It is not workspace-scoped, and it stays empty until the MITRE ATT&CK sync has run. A search of two characters or more returns up to 50 matches per kind.
Graph & list views
Graph (the default) — a force-directed graph with a legend of counts per type. Click a type in the legend to focus the graph on it and the entities it links to; click a node for a detail panel with an Open link where one exists. With no query it shows an overview graph.
List — result cards grouped by kind. With fewer than two characters typed, List browses the whole catalogue (up to 1,000 per kind); from two characters on, it filters.
Not everything is clickable. Malware and tools, mitigations and NIST controls are reference-only: they display but do not link anywhere.