Search reports and ask questions
Babaika is a threat-intelligence workspace for searching aggregated reports and analysing your own documents. Query uses semantic retrieval to find relevant material and generate an answer with links to retrieved sources. Open those sources to check the evidence behind an answer.
Start with a threat actor, malware family or an investigation question, such as “What infrastructure is associated with Lazarus Group?” Results depend on the reports available in the corpus at the time of your query.
Filter structured threat reports
Use report search when you need explicit criteria: report name, tags, malware families, targeted countries, author, source or creation dates. Inspect matching reports and their indicators directly rather than relying only on a generated summary.
Work with your own documents
Signed-in users with upload permission can add PDF, DOCX and Markdown files. Documents are indexed for retrieval; optional extraction produces a structured report. Review extracted fields and any warnings against the original document.
Sources and coverage
Babaika supports reports collected from AlienVault OTX, Botvrij and CIRCL, along with STIX imports, API-created reports and uploaded documents. Available coverage depends on the sources configured by the service operators and their latest successful ingestion. It is not a complete record of every threat or campaign.
Verify findings before acting
Generated answers and extracted reports can be incomplete or incorrect. A source link identifies retrieved material; it does not guarantee that every statement is supported. Check the original report, publication date and context before using a finding in an investigation or defensive action.
Account permissions govern access to queries, reports, uploads and administrative tools. Read the Privacy Policy and Terms of Use, or contact the operators with questions about the service.