RansomLook

RansomLook tracks ransomware victim claims, captured evidence, actors, infrastructure, notes, wallets, torrents, leaks, and technical intelligence. This connector maintains separately scoped claim and actor-profile graphs with bounded delivery and content-free operational metrics in OpenCTI.