Skip to content
OopsieMarbles
Sign in Request early access
Request early access

Nodes are marbles. Edges are relationships.

A marble on its own rarely explains anything. The graph is what the same evidence looks like once the relationships between the pieces are drawn in.

4 sources agree
Graph 7 nodes · 6 edges · conf 0.82
JR
email [email protected] primary · conf 0.98
credential paste-site dump · 2024 breach · conf 0.91
domain vpn-legacy.oopsie-corp.io correlated · conf 0.86
address 185.220.101.44 correlated · conf 0.74
repository oopsie-corp/legacy-etl correlated · conf 0.69
alias jrivera_dev shared · conf 0.63
Primary artifact Correlated Breach source Shared with another subject
8 marbles in this investigation sorted by confidence

Credential reused on corporate SSO

3d ago
high M-4471 · paste site credential 4 sources agree

Unmanaged VPN host answering on a corporate subdomain

4d ago
high M-4468 · passive dns infra 3 sources agree

Subdomain takeover candidate on a dangling CNAME

5d ago
high M-4428 · passive dns infra 3 sources agree

Live API key committed to a public repository

6d ago
medium M-4460 · github repository 2 sources agree

Contractor account active after offboarding

9d ago
medium M-4455 · hr correlation identity 2 sources agree

Employee résumé listing internal tooling and versions

11d ago
medium M-4432 · open web document 2 sources agree

Network diagram published on a public wiki

12d ago
low M-4441 · open web document 1 source

Internal invite link indexed by a search engine

18d ago
low M-4419 · open web document 1 source
Categories

Every artifact says how it got there.

The category is the difference between "we found this" and "we believe this". It is shown on the node itself, not buried in a detail panel.

Primary
A confirmed anchor for this identity. Directly observed, not inferred.
Correlated
Linked by inference. Plausible, not yet independently confirmed.
Breach
Surfaced from a credential dump or breach corpus.
Shared
Also attributed to a different subject — often the most interesting edge on the board.
How confidence moves

Convergence, not assertion.

More evidence. Less guessing.

We don't promise perfect visibility. We promise better understanding.