Modat has built the new Magnify around the pivot: one click from a result to the whole host, and one query language across the interface and the API.
Modat today released a new Modat Magnify, its Internet Intelligence platform, built around the way threat researchers work and aligning the API specification with the interface specification so the Magnify Query Language is consistent across the platform. It is live for every user.
Most investigations start with one value: an IP address in an alert, a hash in a report, a domain nobody recognises. Getting from there to the infrastructure around it used to mean landing on a single port and reassembling the context by hand. Customers told us where that cost them time, in enough detail that the fix was not a guess. This is not a coverage release: the new platform indexes the same internet Magnify did last week. What changed is the distance between a question and its answer.
We have put together a short video showing the new views in the platform: Watch the platform overview on YouTube →
A Host View Built for Pivoting
Clicking an IP address in the search results overview now opens the host detail view rather than the port detail view. Analysts start from the whole host and drill down, instead of landing on a single service and working back out.
The host detail view has been rebuilt to give more choice and flexibility in how the data is presented, with more attributes visible and more usable as a pivot. Values in the results are clickable to filter, so moving from one host to the infrastructure around it is a click rather than a new query.
Multi-Service Pivoting in Threat Investigator
Threat Investigator has improved pivoting. Analysts can now view, compare and pivot from multiple services in the same investigation, rather than working one service at a time.
One Query Language Across the Platform
As requested by several customers, the API specification is now aligned with the interface specification. Search syntax and the API data structure use the same names, so a query written in one place carries over to the other.
All changes are backwards compatible, and existing workflows and saved queries are not affected. Every name change is documented on the legacy field names page in the resource centre.
Dynamic Facets in the Data API
The Modat data API now supports dynamic facets, so results can be aggregated on the attribute that matters for the investigation at hand: ASN, favicon hash, TCP window size, and others. Because facets report cardinality, analysts can see which attributes are selective enough to be worth pivoting on before they commit to a query.
Autocomplete Across More Fields
More fields now complete as you type. On the product filter in particular, this removes the guesswork of matching an exact product name before a search will return anything.
Unauthenticated Search
New users can now run a small number of queries in Magnify before creating an account, so the platform can be evaluated on real data rather than on a description of it.
“Analysts don’t need just data. They need less friction between what they already have and the decision it should drive. That’s why we built the new Magnify Platform with the people who use it, not around them. They told us exactly where existing tools still leave them working by hand, and that became our list. We are not finished, and we do not intend to be.”
said Soufian El Yadmani, CEO of Modat.
Getting Started
Everything here is live now, in the interface and in the API. Existing queries, saved searches and integrations keep working, so there is nothing to migrate: the name changes are listed on the legacy field names page, and the full change list is in the release notes. Log in to explore, get in touch if you would like us to walk your team through the new views, or reach the team at support@modat.io with any questions.
About Modat
Modat is a European Internet Intelligence company helping organisations understand the intent behind internet infrastructure before it is weaponised. By turning internet-scale infrastructure into trusted intelligence, Modat enables analysts and agents to investigate threats faster and prevent attacks before they occur.
Learn more at modat.io, and access the platform at magnify.modat.io.
