Threat intelligence connectors enrich entities (IPs, domains, hashes, URLs) with reputation and context, and feed emerging-threat intel into detection and hunting.◼︎
|
Connector |
What it brings in |
|---|---|
|
VirusTotal |
File, URL, domain, and IP reputation and analysis. |
|
Mandiant (Google Threat Intelligence) |
Curated threat intel and indicator context. |
|
ThreatConnect |
Threat intel platform indicators and context. |
|
NVD |
National Vulnerability Database feeds. |
|
NIST |
NIST reference feeds. |
|
WhoIs |
Domain registration and ownership lookups. |