Built by former offensive operators, the new capability converts advisories from CISA, Mandiant