CTI Tools

Platform for sharing threat information and indicators of compromise.

• IOC sharing
• Event correlation
• REST API
• Web interface

Platform for managing threat knowledge and cyber threat analysis.

• Knowledge management
• Graph visualization
• GraphQL API
• Integration with other tools

Threat intelligence platform with API for integration.

• IOC database
• REST API
• Data export
• Integration with other tools

Threat analysis platform with support for multiple analyzers.

• Multiple analyzers
• REST API
• Web interface
• Integration with TheHive

Knowledge framework on adversary tactics and techniques for threat modeling.

• Attack matrix
• Tactics and techniques
• Adversary groups
• Malware

Standardized format for exchanging cyber threat information.

• Standardized format
• Integration with TAXII
• JSON support
• Extensible

Protocol for exchanging threat information between platforms.

• Secure exchange
• Integration with STIX
• REST API
• HTTPS support

Framework for classifying and analyzing security incidents.

• Standardized classification
• Security metrics
• Incident reports
• Incident database

Tool for detecting patterns in files and memory.

• Customizable rules
• Pattern detection
• Multi-platform support
• Integration with other tools

Service for analyzing files and URLs to detect malware.

• Multi-engine analysis
• API available
• Artificial intelligence
• Detailed reports

Environment for automated analysis of malware and suspicious files.

• Malware analysis
• Detailed reports
• REST API
• Web interface

Threat intelligence platform with community sharing.

• Community pulses
• Indicators of compromise
• API available
• Customizable alerts

Database of malicious IP addresses with scoring system.

• IP address database
• API available
• Scoring system
• Detailed reports

Database of malicious URLs with API for integration.

• URL database
• API available
• Data export
• Integration with other tools

Tool for visualizing and analyzing relationships between entities.

• Graph visualization
• Custom transforms
• Integration of sources
• Investigation reports

Platform for managing security incidents with task automation.

• Incident management
• Task automation
• Integration with Cortex
• Web interface

Platform for automating security tasks and investigations.

• Custom workflows
• Tool integration
• API available
• Web interface