Understand mission agents
Learn what TIEM agents observe in company and VIP missions.
Each agent looks for a type of signal related to mission parameters. Listing an agent below does not guarantee that it is enabled for your organization or will produce a finding. The mission’s Agents section shows which agents are compatible and selected in its current configuration.
What you will do
You will review the agent list and understand what information each agent may observe.
Who can do this
Users with access to the mission can view Agents. Customer roles can only inspect the displayed selection; they cannot select or deselect agents.
Before you start
- Confirm the organization, mission type, and active parameters.
- Some options depend on licensing, consent, mission context, or platform configuration.
Menu path
In the main menu, select TIEM → Missions → choose a mission → Agents.
Steps
- Open Agents and read the descriptions of the displayed options.
- Check which agents are compatible and which are selected for this mission.
- Compare each agent’s purpose below with the mission parameters.
- If no effective agent appears, check the parameters and availability; contact support if an expected configuration is missing.
Company mission agents
| Agent | What it may observe |
|---|---|
| Domain Security Posture | Checks public DNS, email, and TLS configuration signals for monitored domains. |
| Domain Intelligence | Looks for registered domains resembling the company’s monitored domains. |
| Certificate Transparency | Detects suspicious names in public certificates related to monitored brands. |
| IP Reputation Intelligence | Checks external reputation signals for IPs associated with monitored domains. |
| External Exposure Intelligence | Observes publicly exposed services and assets associated with the company context. |
| Internet Exposure Search | Searches public external exposure indicators; detail depends on source availability. |
| External Host Exposure Lookup | Checks public exposure signals for a known host. |
| Data Breach Domain Accounts | Checks references to corporate domain accounts in breach incidents. |
| Public Code Exposure | Looks for brand or domain references in public repositories when enabled. |
| Social Profile Variation | Flags public profiles resembling official profiles or brands; each candidate needs review. |
| Telegram Intelligence | Observes public references in approved channels or groups when configured. |
| Dark Web Brand and Identity Exposures | Identifies relevant brand or identity references when available. |
VIP mission agents
| Agent | What it may observe |
|---|---|
| Social Profile Variation | Flags public profiles resembling official profiles or brands; each candidate needs review. |
| Dark Web Brand and Identity Exposures | Identifies relevant brand or identity references when available. |
| Data Breach VIP Account | Checks references to the monitored person’s email in breach incidents. |
| VIP Phone Reputation | Checks public reputation signals for the phone number supplied to the VIP mission. |
Some brand and social profile agents may appear in both mission types. The mission’s displayed list is authoritative for your context. Signals are candidates for review, not automatic confirmation of an incident.
Expected result
You understand the displayed agents and can see which are selected for future collections without changing that configuration.
Common problems
| Situation | What to do |
|---|---|
| No agent appears | Check mission type and active parameters. Contact support if needed. |
| A catalog agent is missing from your mission | Check availability, license, consent, and parameters. The catalog describes possibilities, not a universal entitlement. |
| An agent appears unselected | Check its displayed state; your role cannot change the selection. |