Daisy

default

Default engagement · phase recon

Targets
1
Services
1
Findings
0
Runs
1
Campaigns
0

How to use this case

One engagement graph in Hermes. Flowers (Poppy, Rose, Lily…) feed adapters into this case. Authorize here; open a flower UI only when you need the native panel.

  • Targets / Services — assets and attack surface from recon & ingest
  • Findings — sessions, hooks, loot with MITRE tags (purple notes for defenders)
  • Runs — audit trail of what executed against this case
  • Campaigns — SE allowlists and kill-switch status

phase3-check rows are hub verify fixtures — not live production intel.

Finding mix

Rolled up by type · flower
No findings yet Run Poppy/Rose ingest or recon into this case.

Recent runs

WhenFlowerStatusRun id
2026-10-20 19:10:46.224047-04:00 Nmap completed 8c8d7df4-3e07-469b-8a1c-e227771f69f6

Targets

Hosts / IPs in this engagement
HostIPSource
localhost 127.0.0.1/32 Nmap

Services

Attack surface
IPPortProtoStateServiceProduct
127.0.0.1/32 22 tcp open ssh OpenSSH 10.2p1 Debian 6

Findings

Detail rows · MITRE for purple team
No findings.

Tool runs

RunFlowerStatusStarted
8c8d7df4-3e07-469b-8a1c-e227771f69f6 Nmap completed 2026-10-20 19:10:46.224047-04:00

Campaigns

SE allowlists
No campaigns on this case.
Event Log
workspace default · case default