tdir-entities

About tdir-entities

Query stored TDIR entity profiles for IPs, domains, URLs, hashes, and other entities; entity ↔ insight ↔ endpoint associations within the platform; and threat intelligence operations summaries (entities summary). Write back human analyst verdicts for entities (entities verdict update) only after explicit user confirmation. Use tdir-investigation-enrichment for standalone real-time BTI intelligence requests. Does not handle threat detection, causal proof, or endpoint compromise determination.