How We Detect and Foil Malicious Network Activity
A plain-language introduction to the layered tools we use to spot, judge, and shut down hostile activity across the estate.
Reference
Detailed technical reference materials for the Phenom project components and architecture.
This section provides detailed reference information, including personnel, architecture diagrams, versioning details, and other technical specifications related to the Phenom project and its components like Buzzard and Peregrine.
Use the sidebar navigation to explore the available reference topics.
Alert Lookup Index
Every alert that can reach your phone or the dashboards - what it means, how urgent it is, and exactly what to do when it arrives.
Disclosure Dossier
Aggregated, reverse-chronological dossier of UAP and government-disclosure events. Combined statistics and a unified knowledge graph span every released tranche; per-release sections preserved below for archival fidelity.
AWS WorkMail Setup and Usage
Guide to setting up and managing email services using AWS WorkMail, including domain configuration and distribution groups.
Personnel
Details about the teams, individuals, and external entities involved with The Phenom App.
Phenom App Versioning
Examples and guidelines for versioning the Phenom App.
Cloudflare DNS Setup Guide
Step-by-step instructions for configuring DNS records in Cloudflare to support AWS WorkMail and various Phenom services hosted on subdomains.
Internet Architecture
A high-level overview of the The Phenom App internet architecture.
Phenom Production Environment
Reference for the production AWS infrastructure backing the Phenom mobile app — Cognito + Hasura + RDS + the action-handler Lambda. Covers what’s deployed, where to find secrets, how to apply changes, and how to smoke-test.
Cognito Email via SES
All three Phenom Cognito user pools (phenom-prod, phenom-staging, phenom-dev-local) deliver password-reset, invite, and verification emails through SES using the verified noreply@thephenom.app identity. This page documents the wiring + the two-piece TF setup so the next pool created gets the same treatment.
Cognito Authentication Flows
How sign-in, password reset, and signup behave across the three Phenom Cognito pools. Includes the custom_message Lambda, the signup-disabled lockdown, mobile-app integration notes, and the operations playbook. Reflects live state as of 2026-05-25.
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.