Hello everyone,
This is Dancho (https://disruptive-individuals.com) and it’s a pleasure to let you know of our recently launched and currently still in the works threat actor specific STIX STIX2 and TAXII threat intelligence feed that combines approximately 15 years of actionable intelligence in machine readable format where you can easily embed it in your firewall or security solution or actually look to enrich and cross-reference the information using Maltego and actually learn how to expose and track down the bad guys by using the industry’s most in-depth niche threat actor specific threat intelligence feed.
Sample screenshots of our STIX STIX2 TAXII threat intelligence feed in action:
The current list of firewall and security solutions where you can embed the STIX STIX2 TAXII feed for free using the following Lifetime API Key – f8aa0cca-a0ac-4eff-9c03-1c86ad7aee93 include:
- EventLog Analyzer
- ThreatConnect
- Azure Sentinel
- Splunk
- Cisco
- Elemendar
- Cortex XSOAR
- TrendMicro
- ArcSight
- Microsoft Sentinel
- EventTracker
- Plixer Scrutinizer
- Sumo Logic
- Kaspersky CyberTrace
- ServiceNow
- CheckPoint ThreatCloud
- Carbon Black EDR
- Cisco Email Gateway
- ThreatConnect
- LogPoint
- Tanium
- Symantec
- LogRhythm
- Infoblox
- Cloudera
In case you’re interested in giving the platform a try or actually implementing it in your security solution for both obtaining access to daily updated free threat intelligence including actual enrichment of your IoCs (Indicators of Compromise) consider going through the following platform details:
Portal:https://ddanchev.ngrok.io
API:https://ddanchev.ngrok.io/graphql
API Documentation:https://luatix.notion.site/GraphQL-API-cfe267386c66492eb73924ef059d6d59
API Client:https://opencti-client-for-python.readthedocs.io/en/3.3.0/pycti/pycti.html
API requirements:https://github.com/amr-cossi/opencti-maltego/blob/master/config.py.sample
TAXII Collection:https://ddanchev.ngrok.io/taxii2/root/collections/c2259b20-9c60-4ddd-8931-8de970440f06/objects
Bearer Token Authentication Required:https://github.com/OpenCTI-Platform/opencti/issues/1198
Maltego transforms available: – https://www.maltego.com/downloads/ – https://www.maltego.com/transform-hub/opencti/ – https://www.maltego.com/transform-hub/stix/
Stay tuned!