The Vertex Project

Threat intelligence shouldn't end with a list of IOCs. What if you could turn known adversary behavior into a pattern to hunt for previously unknown infrastructure? We explored exactly that with @teamcymru + Synapse. Read the investigation: vertex.link/blogs/dprk-i...

The Vertex crew has landed in Belgium! 🇧🇪 We're in Brussels a little early for State of Statecraft on October 22. Already in town? Let's catch up! 🍻 See you around Brussels!

Good intelligence is about more than collecting data. It’s about connecting information, preserving context, and understanding what it all means. That’s why we’re proud to sponsor @stateofstatecraft.bsky.social in Brussels on October 22! 🇧🇪 See you next week! #StateofStatecraft #ThreatIntelligence

Vertex co-founder @invisig0th.bsky.social is joining the inaugural CFP Board for @skisides.bsky.social 2027! ⛷️ Will he evaluate your skiing? Unlikely. He'll be too busy falling down the mountain. 😉 But your talk submissions? Absolutely. 🏔️ CFP closes Nov. 15! skisides.com/cfp

What if the IOC you’re looking for isn’t known yet? 🔎 Using Synapse + Team Cymru's global network telemetry, we turned known DPRK IT Worker behavior into a huntable pattern and uncovered previously unreported infrastructure. vertex.link/blogs/dprk-i...

One of our biggest Q3 milestones: Synapse v3 became generally available. 🚀 Three years in the making, v3 brings a more flexible data model, an enhanced analyst experience, and a stronger foundation for complex intelligence work. ICYMI, take a look: vertex.link/synapse-v3

ICYMI, all episodes of our limited series are out now. 🎧 And… we have a few limited-edition vinyl records available to give away. 👀 Want one? Drop a comment and we might send one your way. 💚 Listen to the full series: vertex.link/10-year-anni... #SignalsAndStories #ThreatIntel

Next stop: Brussels. 🇧🇪✈️ The Vertex Project is heading to @what-is-sos.bsky.social on October 22, and we’re proud to be sponsoring this year’s event. See you in Belgium.

🎰 We’ll be in Las Vegas this week! Our Director of Sales, Dylan Hennessy, will be around and talking all things Vertex Project, Synapse, and intelligence analysis. In town too? Send us a message and let’s find some time to connect. 💚

Bring CYBERA’s money-mule intelligence into Synapse and pivot from bank accounts to related reports, operators, identities, infrastructure, and activity. Less staring at an isolated account. More understanding what’s behind it. synapse.docs.vertex.link/projects/rap...

We’re back from the final #LABScon! We were proud to sponsor and be part of a community that has meant so much to security over the years. Thank you for having us, LABScon. One for the books. 🥂💚 #ThreatIntelligence

Managing IOCs ≠ doing intelligence analysis. Synapse was built to give analysts a place to actually analyze: propose theories, investigate them, test the evidence, and build on existing knowledge. 🎙️ Hear why in the final episode of Signals & Stories: vertex.link/10-year-anni...

Recovering from the jet lag and thinking about a great few days at Team Cymru’s Underground Economy. 🥂 We were proud to sponsor the event + reception and even happier to spend time with such a great intelligence community. Thanks for having us, Team Cymru. Until next time! 💚

Okay, we’ll stop being cryptic. 👀 We pressed a limited-edition Signals & Stories vinyl to celebrate 10 years of The Vertex Project. 💿 There aren’t many and they’re coming to LABScon in your welcome bags. 🙌 See you in Scottsdale. 💚

Our DPRK IT worker investigation uncovered a residential host with proxy + SSH servers, multi-hop communications, and activity overlapping with public reporting. The result? Likely previously unreported infrastructure. See how we got there 👇 🎥 www.youtube.com/watch?v=sWhp...

If you’ve ever wished your query language would just 𝘭𝘦𝘵 𝘺𝘰𝘶 𝘥𝘰 𝘵𝘩𝘦 𝘵𝘩𝘪𝘯𝘨, perhaps it’s time to see what all this revolution talk is about. Learn Storm: synapse.docs.vertex.link/en/latest/sy... #ThreatIntelligence #Storm #Synapse #VertexProject

Well, we made it. 🎙️ 10 episodes. 10 years of Vertex. And for the finale, we HAD to talk about Synapse. @invisig0th.bsky.social + whippit cover its origins, why analysts deserve better than “a bigger spreadsheet,” what’s new in Synapse v3, and what’s next. www.youtube.com/watch?v=qb-c...

The Vertex Project is excited to be a sponsor of Team Cymru’s Underground Economy 2026 including the reception. 🥂 We’re looking forward to great conversations, good company, and maybe a few surprises along the way. 👀 See you there! #UE26 #UndergroundEconomy #ThreatIntelligence #Cybersecurity

What if, instead of hunting a known IP, you hunted a pattern of behavior? 🇰🇵 North Korean IP ↓ 🔀 Astrill VPN ↓ 🏠 U.S. residential infrastructure ↓ 🏢 Victim organization See how Vertex Synapse + Team Cymru telemetry helped hunt both sides of the pattern 🎥 www.youtube.com/watch?v=sWhp...

You can’t analyze relationships your data model doesn’t let you represent. In our latest Signals & Stories episode, thesilence explains why keeping the Synapse data model accurate, intuitive, and reflective of reality requires analysts + engineers working together. vertex.link/10-year-anni...

We felt like the last LABScon deserved something a little different. So we found a guy who is a master at his craft. Got weirdly obsessive on the details. And then made a limited number of copies. More soon. See you at the final LABScon - we’re honored to be a sponsor! 💚

Deleting data is easy. Being sure you wanted to delete it? That’s another story. 🪦 Tombstones in Synapse v3 let you mark data for deletion, review the results, restore what you need, and only make it permanent when you merge. See how it works 👇 vertex.link/blogs/tombst...

A residential IP with 1,000+ inbound connections to a non-standard high port. What is this box doing? 👀 See how Vertex Synapse + Team Cymru telemetry helped investigate some decidedly non-residential behavior linked to DPRK IT worker activity. 🎥 www.youtube.com/watch?v=sWhp...

Analysts 🤝 Developers In the penultimate episode of our 10-year anniversary podcast series, the Vertex team talks about what happens when the people building intelligence software work side-by-side with the people actually using it. 🎧 vertex.link/10-year-anni...

“oops” is not a great feeling when production data is involved. 🪦 Tombstones in Synapse v3 let you preview deletions before you commit them. Learn how to bury your past mistakes 👇 vertex.link/blogs/tombst...

Trust in intelligence isn’t binary. It’s a spectrum. You can trust parts of a report more than others and predictive assessments aren’t simply “right” or “wrong.” In our latest episode, we unpack what it really means to evaluate trust in intelligence. 🎧 hubs.la/Q04rHhzX0

What happens when you hunt beyond IOCs? In our latest webinar with Team Cymru, we used Vertex Synapse + global network telemetry to investigate DPRK IT worker activity and uncover likely previously unreported infrastructure. Watch the full investigation on YouTube: www.youtube.com/watch?v=sWhp...

Optic just got a major refresh. The updated Synapse Enterprise UI features: • A cleaner, more consistent design • A simplified query bar • Custom themes (light, dark, high contrast & community themes) • Expanded edge support • A reworked Stories tool …and more. vertex.link/blogs/synaps...

🚀 Synapse v3 is now generally available. Built with more than a decade of experience alongside intelligence analysts, Synapse v3 delivers a more flexible data model, a better analyst experience, and the performance to tackle complex intelligence workflows. Learn more: vertex.link/synapse-v3

Trustworthy intelligence requires accuracy, precision, transparency, and the context needed to make decisions. In our latest episode of Signals & Stories, we explore what makes intelligence worth trusting and why methodology matters as much as conclusions. Listen here: vertex.link/10-year-anni...

We're soooo close to @vertexproject.bsky.social's release of #Synapse 3.0! In the meantime, you can get a peek at the new features in the #Optic UI, including an updated Stories Tool, themes, and more! vertex.link/blogs/synaps...

Our webinar is TOMORROW! Join The Vertex Project and Team Cymru to see how graph-native analysis and global network telemetry help analysts move beyond IOC chasing to uncover connected infrastructure, hidden relationships, and faster investigative outcomes. 📅 Tomorrow! 🔗 Register: hubs.la/Q04rHr6S0

I just got a preview, and this webinar has everything. 🎉 De anonymized KP ORB nets, job site recon, SSH server key overlaps, residential proxies, palindrome high ports, actor pattern of life... Ryann Hallback and Eli W. are gonna knock this out of the park! 💚🤩

In our latest podcast episode, @threathuntergirl.bsky.social explains why CTI should spend less time debating attribution and more time assessing risk to the business. Listen: hubs.la/Q04rHhBm0 #ThreatIntelligence #CTI

Our webinar is next week! Join The Vertex Project and Team Cymru to see how graph-native analysis and global network telemetry help analysts move beyond IOC chasing to uncover connected infrastructure, hidden relationships, and faster investigative outcomes. 🔗 Register: hubs.la/Q04rHr6S0

Data rarely has the courtesy to fit neatly into one box. With Synapse 3, properties don’t have to either. See how polymorphic properties let a single property support multiple types without losing their distinct meaning or behavior: hubs.la/Q04rHdVL0 #Synapse #DataModeling

ICYMI in our #synapse-releases Slack channel: we've shipped two new Synapse Power-Ups. ⚡ Google Threat Intelligence (Google-TI) ⚡ Volexity 🔗 synapse.docs.vertex.link/projects/rap... 🔗 synapse.docs.vertex.link/projects/rap... #ThreatIntelligence #OSINT #DFIR #Synapse

Your keyboard has a theme. Your editor has a theme. Your intelligence platform should too. Syn3 Optic now supports multiple themes, including light mode and high contrast. Preview on hover, choose your favorite, and it'll persist across sessions. Learn more: vertex.link/synapse-v3

Join us to see how Synapse + Team Cymru's global network telemetry help analysts pivot from isolated indicators to connected infrastructure, uncover hidden relationships, and accelerate investigations with graph-native analysis. vertex.link/events/beyon...

I mentioned this quote and forgot who said it and who shared it and wanted to give credit where credit is due

Two analyst teams once disagreed over attribution so intensely it nearly turned into a fistfight. 😅 The lesson isn't self-defense. It's this: great intelligence means challenging assumptions, questioning conclusions, and changing your mind when the evidence does. www.youtube.com/watch?v=Awvv...

Being able to represent the whole story is critical to threat actor attribution. Can your platform represent analytically relevant lunch orders? 😉 PoL is now "Pattern of Lunch" ctrlaltintel.com/research/Voi...

Join us to see how Synapse + @teamcymrus2.bsky.social's global network telemetry help analysts move beyond IOC chasing to uncover infrastructure, expose campaigns, and connect adversary tradecraft through real-world investigations. vertex.link/events/beyon...

What’s that saying about the best laid plans? 😅 Our Synapse 3.0 demo video is going to be delayed. We're taking a little more time to make sure it's worth the wait. Thanks for your patience! Learn more about Synapse 3.0: vertex.link/synapse-v3

Synapse Enterprise v3.0.0b3 now supports multi-core parallel execution for Storm queries. The new Storm query worker pool automatically scales across CPU cores, allowing a big boost to Storm query throughput! docs.vertex.link/docs/synapse...

In the latest Signals & Stories podcast, we discuss confirmation bias, attribution pitfalls, analytical tradecraft, and why the best intelligence teams encourage respectful disagreement. www.youtube.com/watch?v=Awvv...

Managing distributed Synapse deployments just got simpler. ✨ Automatic AHA provisioning 🔍 Service discovery by type 🔄 Dynamic leader election ⚙️ Less manual configuration The latest Synapse Enterprise Beta brings major improvements to operating at scale. docs.vertex.link/docs/synapse...

In the latest episode of Signals & Stories, @lawsecnet.counterintelligence.pl highlights why effective intelligence requires both skilled OSINT researchers and regional experts who provide the cultural and local context technical analysis alone can't. vertex.link/10-year-anni...