Recognized Cyberspace Picture (RCyP): Empowering Intelligence Analysts Through AI-Driven Cyber Triage and Attribution

The constant evolution of cyber threats has a direct impact on key terrain within cyberspace. Military commanders lack real time data about cyber-attacks which delays decision making and makes assessments on protecting mission assets very difficult. TeamWorx Security’s proposed solution of a RCyP directly addresses these critical defense needs identified by the 16th Air Force and broader Department of Defense cyber operations community. The RCyP prototype specifically aligns with defense needs through its ability to provide near real-time updates to decision makers and to end users based off changes to MRT-C within a user friendly and display friendly dashboard which quickly contextualizes the cyber threat intelligence data on identified nodes of critical infrastructure. Traditional cyber defense approaches are reactive and siloed, limiting the ability of cyber operators and commanders to understand the broader operational context of cyber events and their potential impacts on military operations and critical infrastructure. The RCyP prototype transforms this paradigm by aggregating disparate cyber event data sources either directly from the users or through source reports, applying AI analysis to reduce noise and build actionable context, and presenting customized operational assessments on the impact of key terrain tailored to specific end users. RCyP provides the foundational situational awareness capability needed to make informed decisions about defensive posturing, offensive targeting, and resource allocation to directly support 16th Air Force's mission to converge capabilities and generate information warfare outcomes for combatant commanders and air components across the full spectrum of cyber operations. The RCyP generates insights tailored specifically to the end user’s role and provides organizational contexts directly supports the command's responsibility to defend Air Force networks while projecting power in, through, and from cyberspace. RCyP addresses the critical gap between data availability and the delay of actionable intelligence that currently hampers effective cyber defense operations and slows the command’s ability to prepare for conflict with peer adversaries. RCyP’s applicability extends beyond immediate operational needs to address systemic challenges within the cyber community, including high turnover of technical experts, limited collaboration capabilities, and the need for institutional knowledge retention. Lastly, through RCyP’s AI analysis capabilities, RCyP ensures that changes to the MRT-C environment and operational insights are captured, contextualized, and informs decision makers to support both current operations and future defensive and offensive preparations while enabling 16th Air Force to compete now with its most advanced adversaries.