Hudson Rock Partners with TRM Labs as a Launch Data Partner for Ardence, the New AI Investigation Platform

Bridging the gap between blockchain activity, technical attack infrastructure, and real-world cybercriminal identity to help government investigators, cyber threat analysts, and compliance teams disrupt modern AI-enabled crime.

As threat actors increasingly weaponize artificial intelligence and infostealer malware to scale cyberattacks, ransomware operations, and illicit financial schemes, defenders and investigators face an unprecedented operational challenge. Today, Hudson Rock is thrilled to announce our official partnership with TRM Labs as a launch data partner within the Ardence Data Network, powering TRM Labs’ newly unveiled AI investigation platform, Ardence.

Built specifically for government investigators, cyber threat analysts, and compliance teams across more than 600 agencies and institutions in 75 countries, Ardence brings specialized intelligence from more than 60 partners into a single, AI-native platform to tackle cybercrime, fraud, money laundering, sanctions evasion, and terrorism financing.

“To catch sophisticated threat actors, investigators must bridge the gap between blockchain activity and cybercriminal identity. Partnering with TRM arms analysts with real-time visibility into high-profile cybercrime networks, drastically accelerating complex investigations from start to finish.”

Alon Gal, CTO and Co-Founder, Hudson Rock

Closing the Capacity Gap in the Era of AI-Enabled Cybercrime

Criminal networks are utilizing AI to drastically increase both the volume and velocity of their operations. While investigators possess the tradecraft required to build high-stakes cases, the sheer scale of modern cybercrime has created a severe capacity gap that manual research and hiring alone cannot close.

Recent findings from TRM Labs highlight the scale and speed of this evolving threat landscape:

Traditionally, cybercrime and nation-state investigations have been slowed down by fragmented intelligence:

• Evidence is scattered across silos: Threat reporting, domain and infrastructure records, infostealer compromises, and on-chain financial activity sit in separate tools, forcing analysts to spend valuable hours collecting data before they can even assess a campaign.
• Related attacks are investigated in isolation: Shared infrastructure, malware tooling, compromised credentials, and laundering services often link incidents across organizations, yet a single report rarely reveals the wider operation.
• Manual research delays operational action: Analysts repeatedly run searches across disconnected platforms and manually reconcile findings into briefings for law enforcement, defenders, and leadership.

Understanding the Operation Behind the Attack with Hudson Rock & Ardence

Simply connecting a generic AI model to raw data does not provide the investigative tradecraft or audit trail needed for high-consequence environments. Featured prominently on TRM Labs’ Cyber Attacks & Cybercrime mission hub, Hudson Rock integrates directly into Ardence’s all-source intelligence architecture so investigators can ask questions in natural language and query across cyber, breach, identity, infrastructure, and blockchain sources in parallel.

By pairing TRM Labs’ blockchain and cross-source intelligence with Hudson Rock’s proprietary infostealer and cybercrime intelligence, analysts can seamlessly execute four core investigative workflows:

Built for High-Stakes Scrutiny and Real-World Disruption

As TRM Labs CEO and Co-Founder Esteban Castaño noted at launch, Ardence is engineered to take the most manual work off investigators’ plates so the same team can work more cases without sacrificing rigor or precision:

• Connected Intelligence: The Ardence Data Network unites TRM intelligence with specialized cyber, dark web, identity, corporate, and financial intelligence, including Hudson Rock’s infostealer data, under a unified investigative workflow.
• Expert Tradecraft: Ardence applies repeatable analytic methods developed with experienced CTI and financial crime analysts to follow leads further than a team could by hand.
• Built for Scrutiny: Every finding stays strictly linked to its source material so reviewers can retrace the exact methods and human decisions behind a conclusion.
• Carried into Action: The unified investigation record directly supports drafting legal processes, asset-freeze requests, Disruption Sprints, and infrastructure takedowns, already helping global teams protect major international events, dismantle ransomware laundering pipelines, and take down thousands of scam sites.

Through this partnership, Hudson Rock’s unmatched visibility into global info-stealer infections and cybercriminal ecosystems empowers Ardence users to connect compromised credentials, infected machines, and threat actor footprints directly to on-chain illicit finance, turning fragmented indicators into decisive disruption.