Data Sources

Jump to bottom

gs-ai edited this page Mar 18, 2026 · 2 revisions

Data Sources

SPECTRUMv2 source governance is configured in:

config/ingest_sources.yaml

Current Source Families

ransomware_live (victim search API workflow)
abuse_ch.threatfox
abuse_ch.urlhaus
abuse_ch.feodotracker
reputation.blocklist_de
reputation.ipsum
background.cisa_kev

Each source can be enabled/disabled in config.

Notes

Several optional feeds are present but disabled by default in config.
Normalization happens during graph build and ingestion pipelines.
graph/data/sources.json is generated from active graph node sources for viewer legends.