Bait A Phish

Bait A Phish is an opinionated security workspace that produces reusable artifacts: daily change detection, incident briefs, research summaries, training games, and an ATT&CK-indexed retrieval layer.

It’s designed to be scannable first (so you can decide what to look at), then drill-down ready (so you can act).

1. Start on Home and pick a path from the Explore cards.
2. Use Daily to scan what changed.
3. Jump to Incidents for deeper, curated context.
4. Use Research for long-form references.
5. Use MITRE to browse techniques and see linked Daily/Incidents.

• Deterministic selection: inclusion/ranking is rule-based (no LLM deciding what matters).
• Evidence discipline: sources are tiered; low-trust sources are quarantined unless corroborated.
• Local-first output: pages render from files under output/.
• Graph over feed: ATT&CK technique pages connect daily items, incidents, and CVEs.

• Daily archive + Latest
• Incident Vault
• Research briefs
• MITRE ATT&CK index + technique detail pages
• Bandit tutorial track
• Phishing Spotter

The site is powered by a set of scheduled scripts that generate artifacts (JSON/MD/SQLite) under output/. The web UI then renders those artifacts and adds navigation + linking.

If you want the gory details—tools, triggers, workflows, timings—see Forge.