Malfors v1.1 Released

Enrichment now detects shared datapoints across entities automatically.

IP entity enrichment panel showing a shared datapoint detected in another entity, with a prompt to connect the two
Enriching IPs reveals a datapoint shared with between two of them – click to connect them.

Auto Correlations

When you enrich an entity, Malfors checks its datapoints against every other entity in the case. If two entities share a value – same ASN, same registrar, overlapping infrastructure – you get a prompt to link them directly on the graph.

This applies to all managed and custom enrichments, including past runs. As your case grows, correlations keep accumulating without any manual cross-referencing.

See a video demo.