FTM Entity Types
Person
Natural person.
| Field | Type | Example |
|---|---|---|
name | string | ”John Garcia Lopez” |
alias | string[] | [“Johnny”, “JGL”] |
birth_date | date | ”1975-03-15” |
nationality | string | ”US” |
id_number | string | ”123456789” (SSN) |
position | string | ”Chief Executive Officer” |
Company
Commercial company.
| Field | Type | Example |
|---|---|---|
name | string | ”Acme Corp Inc.” |
registration_number | string | ”12345678” (EIN) |
jurisdiction | string | ”US” |
incorporation_date | date | ”2019-06-01” |
status | string | ”active” | “dissolved” |
registered_address | string | ”123 Main Street, New York” |
Organization
Non-profit organization, NGO, association.
Same fields as Company, plus:
| Field | Type | Example |
|---|---|---|
org_type | string | ”NGO” | “political_party” | “criminal” |
PublicBody
Public agency, government body.
| Field | Type | Example |
|---|---|---|
name | string | ”Department of Interior” |
jurisdiction | string | ”US” |
parent_body | string | ”U.S. Government” |
Domain
Domain name.
| Field | Type | Example |
|---|---|---|
name | string | ”acme-corp.com” |
registrar | string | ”GoDaddy” |
registered_on | date | ”2019-01-15” |
expires_on | date | ”2025-01-15” |
nameservers | string[] | [“ns1.example.com”] |
Email address.
| Field | Type | Example |
|---|---|---|
email | string | ”attacker@protonmail.com” |
provider | string | ”ProtonMail” |
Phone
Phone number.
| Field | Type | Example |
|---|---|---|
number | string | ”+1612345678” |
country | string | ”US” |
type | string | ”mobile” | “fixed” |
UserAccount
Account on social network or online platform.
| Field | Type | Example |
|---|---|---|
platform | string | ”Twitter” | “Telegram” | “GitHub” |
username | string | ”@attacker” |
url | string | ”https://twitter.com/attacker” |
created_on | date | — |
BankAccount
Bank account.
| Field | Type | Example |
|---|---|---|
iban | string | ”US12345678901234567890” |
bank_name | string | ”Bank of America” |
bic | string | ”BOAAUS3A” |
currency | string | ”USD” |
Document
Document with its own identity.
| Field | Type | Example |
|---|---|---|
name | string | ”Services Contract 2024” |
file_type | string | ”pdf” |
sha256 | string | ”d41d8…” |
date | date | ”2024-03-15” |
source_url | string | — |
Event
Event with date and location.
| Field | Type | Example |
|---|---|---|
name | string | ”Acme board meeting” |
start_date | date | ”2024-03-15” |
end_date | date | — |
location | string | ”New York” |
description | string | — |
Location
Geographic location.
| Field | Type | Example |
|---|---|---|
name | string | ”123 Main Street, New York” |
country | string | ”US” |
region | string | ”New York” |
city | string | ”New York” |
lat | float | 40.7128 |
lng | float | -74.0060 |
Entity relationships
| Relationship | From → To | Description |
|---|---|---|
owns | Person/Company → Company | Ownership |
controls | Person/Company → Company | Control without direct ownership |
member_of | Person → Organization | Membership |
located_at | Company → Location | Headquarters or address |
registered_in | Company → Domain | Corporate domain |
uses | Person/Company → UserAccount | Social media account |
associated_with | Domain → IP | DNS resolution |
employed_by | Person → Company | Employment relationship |
related_to | Any → Any | Generic relationship |