patch&proof.

Visual research / source-first

Less stock imagery.
More actual evidence.

Company photographs, original investigation figures and source-published screenshots. Inspect each image alongside its origin and context.

First-party company photograph

Industrial resilience

Company photograph illustrating Hydro’s own cyberattack retrospective; not a documented photograph of the incident itself. Image: Norsk Hydro ↗Source image · rights/provenance review pending
Read the case file ↗

Original research diagram

A supply chain inside a supply chain

Figure 1 from Mandiant’s April 2023 investigation. The diagram represents the investigators’ reconstruction. Image: Mandiant / Google Cloud ↗Source image · rights/provenance review pending
Read the case file ↗

Original vulnerability mark

A vulnerability gets an identity

Original vulnerability identification mark, not an image of an attack. The source page states CC0 for this logo. Image: Codenomicon / Heartbleed.com ↗Source image · rights/provenance review pending
Read the case file ↗

Original research figure

Following the credential trail

Original figure from Mandiant’s June 2024 investigation; it reflects the report’s investigative scope. Image: Mandiant / Google Cloud ↗Source image · rights/provenance review pending
Read the case file ↗

Source-published screengrab

A source-published technical exhibit

Source-published technical screenshot from Microsoft’s July 2025 investigation; shown as an evidence exhibit. Image: Microsoft Threat Intelligence ↗Source image · rights/provenance review pending
Read the case file ↗

These are existing source images, not AI-generated depictions. Resizing preserves the whole figure. Local review does not imply permission to republish; rights and provenance need owner approval before release.

Search the evidence
Source image / inspection view

View original source ↗Local review · rights and provenance pending owner approval