Spectrally-Processing Extraction, Crawling, & Tele-Reconnaissance Archive
SPECTRA is a forensic-grade intelligence framework for Telegram network discovery, criminal market economics, and threat actor attribution. It features a unified NSO-style Cipher Command dashboard for real-time operational control.
- 🕸️ Infrastructure Nexus: Map shared technical artifacts (Panel URLs, Bot IDs) to reveal hidden connections between seemingly independent actors.
- 💰 Economic Market Engine: Track Gross Market Value (GMV) across CaaS sectors (Initial Access, Malware, Logs) with USD-normalized pricing.
- 📑 Narrative Synthesis: Automated LLM-driven intelligence briefings that classify actor archetypes and strategic threat status.
- 💳 Wallet-Watch (DIRECTEYE Ready): Forensic extraction of BTC, XMR, and TRX/ETH addresses with built-in hooks for DIRECTEYE blockchain attribution.
- 🚀 One-Command Deployment: Production-ready Docker orchestration with automated SSL via Caddy.
- 🛡️ OPSEC Core: Multi-account/API rotation and proxy support for anti-detection and persistent collection.
- 🧠 MEMSHADOW Sidecar: Advanced 4096-dimensional semantic memory persistence and cross-LLM context preservation for deep threat analysis.
The fastest way to launch the Cipher Command Deck with automated SSL and secure proxying:
# Clone and enter
git clone https://github.com/SWORDIntel/SPECTRA.git
cd SPECTRA
# Launch the full stack
export SITE_ADDRESS="your-domain.com" # Defaults to localhost
docker-compose up -dAccess the dashboard at https://your-domain.com (or http://localhost).
Launch the unified web console directly:
./spectraSecure the interface for remote access:
export SPECTRA_GUI_API_KEY="your-secure-key"
./spectra --api-key "$SPECTRA_GUI_API_KEY"Pivot through the criminal network using CaaS-aware scoring to identify high-value targets.
./spectra discover --seed @target_channelExtract pricing, services, and aliases from canonical archives into structured dossiers.
./spectra process-queue --batch-size 250Automatically map infrastructure links and crypto-financial footprints across the entire repository.
- ✅ Cipher-Ops Dashboard: High-contrast operational control surface.
- ✅ Economic Intel: USD-normalized GMV tracking and profitability rankings.
- ✅ Forensic Dossiers: Narrative summaries, wallet sightings, and nexus alerts.
- ✅ Production Ready: Docker + Caddy integration for secure remote ops.
Detailed technical reference and guides are available at:
- Dashboard API:
/docs(OpenAPI 3.1 / Swagger) - Full Manual:
/readmeor GitHub Pages
This project is licensed under the MIT License - see the LICENSE file for details.
