Skip to main content
ClusterHawk
Sign Up

Platform Documentation

Learn how to use ClusterHawk for IP clustering and threat detection

Search Documentation

1
Submit IPs

Upload your IP addresses of interest through our secure interface. Our platform handles datasets up to 5000 addresses.

2
Analysis

Our deterministic ensemble pipeline analyzes patterns, identifies relationships, and generates threat intelligence automatically — same input, same clusters, same reasoning, every run.

3
Receive reports

Get comprehensive threat intelligence reports with IOCs, YARA rules, and hunting queries.

4
Execute hunting queries

Use our automated hunting query execution service to validate findings and monitor for new threats.

User Guide

Job Config Tab

Job Config Tab

For Basic and Training jobs, the JOB CONFIG tab is a record of the configuration values that actually produced this job's results. It's read-only: to change these settings for future jobs, use the Configurations tab in your Workspace.

  • Processing Options: Whether Train on Noise Cluster, Aggressive Honeypot Detection, and Automatic Labeling were turned on for this job.
  • Clustering Weights: The per-feature weights the clustering engine used, shown when custom weights were configured for the job.
  • Enabled Labeling Rules: Which of your labeling rules were active, shown when automatic labeling was turned on.