v1.0.0 — Active Threat Intel

Rakshastra

An autonomous, AI-driven cyber defense agent designed to map, track, and disrupt digital narcotics operations and illicit bot networks across modern social platforms.

> Drug Dealing can be done anywhere

Drug networks hide in plain sight
across social platforms

Traffickers exploit Telegram channels, Instagram DMs, and WhatsApp groups to run automated, bot-driven supply chains with menus, pricing, and drop-location delivery.

Invisible Infrastructure

Disposable accounts, coded slang, and emoji-based pricing that evades traditional keyword filters.

[ HOVER TO DECRYPT ]

Rakshastra's Response

An autonomous AI agent combining Gemini NLP, graph-based identity resolution, and real-time metadata triangulation to build actionable intelligence for law enforcement agencies.

[ HOVER TO SCAN ]

Agent Console

Watch the crawlers ingest, analyze, and triangulate threats in real time.

Agent Metrics
Active Crawlers148
Flagged Channels1,402
Identities Mapped418
Alerts Dispatched92
rakshastra-agent@core:~
$ rakshastra-agent start --mode=production
[CORE] Initializing Hermes Agent Core v1.0.0...
[CORE] GCP Cloud Run container online.
[CORE] Gemini API handshake complete.
[CORE] Loading keyword database [MDMA, LSD, Mephedrone, ...]
[CORE] All systems nominal. Starting crawlers...

Core Capabilities

Built on Hermes Agent Core, powered by Gemini Pro, backed by Neo4j Knowledge Graphs.

Stealth Crawlers

Continuous, low-footprint scraping of illicit bot networks and distribution menus across mainstream messaging applications.

Gemini NLP Parsing
Metadata Triangulation
Relational Knowledge Graph
01 / 04
Telegram Crawler Ingestion
EXECUTION STRATEGY
[ Scroll Down to Track Integration Stack ]
Rakshastra Core Integrations
Telegram
WhatsApp
Instagram

Implementation Timeline

Five distinct phases designed for robust platform deployment.

Phase 1

Setup & Cloud Infrastructure

Laying the secure foundation for the OSINT ecosystem

Configure security-hardened environments and provision database services with unified identity access management.

Key deliverables
✓

Fork the core Hermes codebase and implement continuous deployment via Cloud Build pipelines.

✓

Provision serverless GCP Cloud Run containers running with isolated IAM profiles.

✓

Initialize high-performance Neo4j Graph Database and resilient serverless Firestore instances.

✓

Configure encrypted credential vaults and establish connection tunnels for the Gemini API.

Phase 2

Data Ingestion Pipelines

Connecting live endpoints to ingest high-fidelity intelligence

Establish secure data listeners and scrapers to channel OSINT content directly into automated processing systems.

Key deliverables
✓

Deploy custom Telegram API listeners subscribing to public and private investigation streams.

✓

Configure headless Instagram scrapers running through rotating proxy networks to prevent rate limiting.

✓

Build real-time ETL pipelines utilizing structured regex parsing to sanitize raw text blocks.

✓

Map cross-platform identities into the Neo4j threat graph, establishing tracking vectors.

Phase 3

Core Agent Security Skills

Empowering AI agents with logical reasoning and footprint protection

Develop advanced LLM chains to analyze threat contexts safely while keeping agent footprints invisible.

Key deliverables
✓

Implement IP isolation layers, Tor-routing wrappers, and mock user agents to hide footprints.

✓

Integrate entity-extraction algorithms targeting phone numbers, crypto wallets, and hidden links.

✓

Design Gemini 1.5 Pro chain-of-thought routing to deduce coordination patterns.

✓

Deploy localized auto-summarization templates to produce rapid incident intelligence reports.

Phase 4

Investigator Dashboard & Alerts

Synthesizing graph networks into visual command centers

Create interactive user interfaces for real-time visualization, query filters, and instant notification systems.

Key deliverables
✓

Develop a React-based interactive canvas rendering real-time Neo4j network graphs.

✓

Build tabular search filters querying actors, timestamps, threat weights, and platforms.

✓

Integrate Twilio API handlers to format and dispatch immediate threat alerts directly to WhatsApp.

✓

Configure multi-user access levels ensuring sensitive investigations remain strictly audited.

Phase 5

Pilot Deployment & Optimization

Validating operational stability and scaling output quality

Perform full-scale threat simulations, refine linguistic evaluation parameters, and deploy live integrations.

Key deliverables
✓

Simulate cross-platform threat campaigns to analyze end-to-end system response latency.

✓

Finetune context prompts to decrease false positives and raise accuracy of entities extracted.

✓

Secure production endpoints via OAuth2 credentials, strict CSRF mitigation, and session timeouts.

✓

Establish automated feedback loops with partner agencies to continuously refine threat weight rules.

Deploy the Agent

One command install, or download the binary for your platform.

MACOS 12+

Mac OS

Native client for Apple Silicon.

WINDOWS 10/11

Windows

Desktop GUI & crawler supervisor.

ANY DISTRO

Linux

Headless CLI agent for servers.

curl -sS https://get.rakshastra.ai/install.sh | bash