October 24, 20263 min readconference
Share:
Oasis Security Presents Preemptive Attack Infrastructure Detection Strategy at KPEX 2026
By Threat Intelligence Unit

Overview
Oasis Security showcased its CTI platform AGATHA and dark web intelligence service ARTHUR at Korea Police World Expo 2026 (KPEX 2026).
Unlike traditional post-incident analysis, Oasis Security emphasizes the proactive identification and profiling of command-and-control (C2) and attack infrastructure during the attack preparation stage, enabling earlier detection of potential cyber threats.
Key Insights
| Topic | Summary |
|---|---|
| Attacker-side intelligence | Collects and analyzes artifacts from attacker-controlled infrastructure, rather than relying solely on post-incident malware analysis |
| AGATHA | Uses AI-driven infrastructure profiling to identify potential C2 and attack servers during the preparation stage |
| ARTHUR | Helps uncover public IP addresses associated with dark web hidden services, supporting infrastructure identification and cybercrime investigations |
| Government and public-sector adoption | Serves government and public-sector organizations, including an overseas government agency through a SaaS-based offering |
Key Takeaways
| Topic | Summary |
|---|---|
| Proactive threat intelligence | Shifts the focus from post-incident investigation toward early identification of attacker infrastructure, potentially enabling intervention before attacks are launched |
| Law enforcement applications | Combines proactive infrastructure intelligence with dark web infrastructure identification to support cybercrime investigations |
| International opportunities | Highlights potential partnerships with law enforcement and government organizations across the U.S., Europe, Asia, and the Middle East |
Reference
👉 AVING article
Tags:conferencekpexagathaarthurcti