ot-intel-api.onrender.com

ICS threat actor profile lookup. Pass ?name=SANDWORM. Fetches live data from MITRE ATT&CK for ICS (STIX bundle) + CISA ICS advisories, enriched by DeepSeek. Returns: MITRE technique mappings (ICS-specific T-codes), known malware/tools, related groups, recommended OT detections, attribution, physical impact assessment, and last known activity. Works for any known ICS threat actor — not limited to a fixed list. Alias lookup supported (e.g. Volt Typhoon → VOLTZITE, APT44 → SANDWORM).