โ† All modulesยทENTERPRISE PLAN

Threat Intelligence

A managed IOC feed you can check any indicator against โ€” reviewed before it counts.

Maintain a feed of indicators of compromise (IPs, domains, hashes) with a review workflow, and check any value against it from wherever you need โ€” SIEM correlation, ticket triage, or a manual lookup.

2
Sub-modules
2
Module integrations
7
Features

SUB-MODULES

Everything inside Threat Intelligence.

๐Ÿ“‡

IOC Management

Add, review, and retire indicators of compromise.

  • โœ“IOC submission (IP/domain/hash/etc.)
  • โœ“Analyst review workflow before an IOC counts
  • โœ“IOC removal
  • โœ“Full IOC audit trail
โœ…

Indicator Check

Check any value against the reviewed feed on demand.

  • โœ“On-demand indicator lookup
  • โœ“Used by SIEM event correlation
  • โœ“Fast feed-membership check

MODULE CONNECTIONS

How Threat Intelligence connects
to the rest of the platform.

Data flows between modules automatically โ€” no manual exports, no copy-paste, no middleware.

๐ŸŽฏThreat Intelligence