Login
AGENT INDEX / 02B
Investigation

INVESTIGATION

| JAX · OSINT · GEOLOCATION · ENTITY RESOLUTION |

Signals in.
Evidence out.

Jax for Investigation. Pulls global feeds into the Codex, resolves entities across time and space, geolocates threats, and produces an audit-trailed case file you can hand to a prosecutor or a commander.

AGENT 02B · INVESTIGATION

[ INVESTIGATION ]

from signal,to entity,to evidence.

INTRODUCTION

An investigation is rarely a dashboard problem. It is an integration problem — one analyst, eighteen tabs, a screenful of feeds none of which speak to each other, and a case file that gets written by hand at the end of the week. The signal is there; the loop is broken. Jax for Investigation closes the loop. The agent pulls every feed into a single Codex, resolves the same entity across providers and timeframes, geolocates it against the map, and writes a case file that carries the provenance of every claim inside it.

And this is what that changes:

Investigations as code — collected, correlated, attributed.

5 Surfaces
of a Modern
Investigation

  1. 01

    OSINT Collection

    Connect to commercial feeds, social channels, leaked corpora, vessel and aircraft trackers, and your own ingest queues. Jax normalizes them into typed entities in the Codex and keeps the source attached to every field.

  2. 02

    Threat Geolocation

    Pin an event, a post, an IP, a vessel, or a fragmentary clue to a coordinate. The agent reasons over imagery, terrain, daylight, signal propagation, and known infrastructure to bound the answer in space and time.

  3. 03

    Entity Resolution

    Collapse a person, asset, or organization across providers and aliases into one resolved entity. Match strength is exposed; merges are reversible; every supporting record stays linked in the case file.

  4. 04

    Cyber Surface Mapping

    Continuously enumerate the externally visible footprint of an organization, a sector, or a country. Hosts, ports, certificates, technologies, exposures — resolved into entities with geometry on the map.

  5. 05

    Exposure Mapping

    Cross spatial assets with cyber posture, threat actor activity, and supply-chain dependencies. Surface the entities under elevated risk now — not the average, the specific ones a case can act on this week.

PIPELINES1 — S5
[ FEED IN · CASE OUT ]

Feeds in. Cases out.

One loop, end to end. Providers stream in through the same Codex your map renders from. The agent normalizes, resolves, geolocates, and writes the case file as the investigation unfolds — carrying provenance through every step.

  1. S1

    Feeds in

    Commercial OSINT, vessel + flight trackers, leaked corpora, sensor and signals streams, internal case files. The agent connects through your existing data residency boundary.

  2. S2

    Codex normalization

    Every record is typed against the Ontology and written to the Codex. Provenance, capture time, sensor lineage, and confidence ride with the field, not in a sidebar.

  3. S3

    Entity resolution

    The same person, asset, vessel, or organization is collapsed across providers and aliases. Match strength is exposed; merges are reversible; the lineage is preserved.

  4. S4

    Spatial correlation

    Geolocate, range-bound, and co-locate. Cross entities against terrain, weather, sensor windows, and other entities. Surface the geometry the case turns on.

  5. S5

    Case file

    A live document the agent assembles and the analyst trims. Every claim carries the records that justify it; every conclusion is replayable end to end.

| SIGNAL PIPELINE · INVESTIGATION LOOP |PIPELINE 02B
IN THE FIELDU1 — U4

Four teams
investigating with Jax.

  1. U1DEFENSE

    Track adversary order of battle in near-real time.

    Vessels, aircraft, formations, posts — resolved as live entities on the same map a commander already operates from.

  2. U2FRAUD

    Resolve synthetic identities across providers and time.

    Collapse aliases, devices, accounts, and counterparties into one entity per actor. Replayable lineage at the field level.

  3. U3AML

    Surface beneficiary networks the corpus is hiding.

    Cross transaction graphs with corporate registries, leak corpora, and sanctions lists. Geometry where the law cares about it.

  4. U4BRAND PROTECTION

    Catch counterfeit and impersonation surfaces at scale.

    Continuous discovery across web, marketplaces, social, and DNS. Cases opened automatically; provenance retained.

| USE CASES · INVESTIGATION |02B / FIELD