Fast entity lookup by type (actor, cve, tool, campaign, person, location). O(1) index lookup.

Traverse the STIX 2.1 knowledge graph from an entity. Shows relationships: uses, targets, attributed-to, etc.

Search ZettelForge memory using blended vector + graph retrieval. Returns ranked results with entities, confidence, and tier.

Store threat intelligence in ZettelForge memory. Extracts entities (CVEs, actors, tools) and adds to knowledge graph. With evolve=true (default), uses LLM to compare against existing notes and decide whether to add, update, or supersede.

Get ZettelForge memory system statistics: total notes, entity counts, retrieval count.

Trigger sync from OpenCTI — pulls latest reports, indicators, threat actors, malware, and vulnerabilities.