Skip to main content

Platform Documentation

Learn how to use ClusterHawk for IP clustering and threat detection

Search Documentation

1
Submit IPs

Upload your IP addresses of interest through our secure interface. Our platform handles datasets up to 5000 addresses.

2
Analysis

Our deterministic ensemble pipeline analyzes patterns, identifies relationships, and generates threat intelligence automatically — same input, same clusters, same reasoning, every run.

3
Receive reports

Get comprehensive threat intelligence reports with IOCs, YARA rules, and hunting queries.

4
Execute hunting queries

Use our automated hunting query execution service to validate findings and monitor for new threats.

User Guide

Model Tab


Model Tab

For model training jobs, the MODEL tab provides detailed information about the trained model:

  • Model Architecture: Shows the structure of the trained model, including components and their relationships.
  • Performance Metrics: Displays accuracy, precision, recall, F1 score, and other metrics for evaluating model performance.
  • Feature Importance: Visualizes which features had the most significant impact on model decisions.
  • Training Statistics: Shows information about the training process, including convergence metrics and iteration count.
  • Confusion Matrix: For classification models, displays correct and incorrect predictions by class.
  • Individual Model Performance: For ensemble models, shows performance metrics for each component model.
  • Model Weights: Displays the weight or contribution of each model in the final ensemble.