7 - Cyber Threat Intelligence Products & Services | for best viewing this tab should be set at a size of 75% |  |  |  |  |  |  |  |  |  |  |
return to main |  | Generic Protections |
Links to Variety of CTI Resources | https://github.com/hslatman/awesome-threat-intelligence |  | Malicious URLs & IPs |  | Rapid Sharing esp Sector | Matching Threat Actors to the Business |
Gartner List | https://www.gartner.com/reviews/market/security-threat-intelligence-services |  | Embedded Malware |  |
|  |  |  | Lateral Movement |  |
See also 5-CyberTools tab, row 168 Frameworks, Methodologies, Metrics, Protocols & Formats for Cyber Intelligence |  | APT Activity |  |
Other Interesting OSINT Cyber Tools |  |  |  |
Commercial |  |  | Products/Tools |  |  |  | Quarterly/Annual Threat Reports |
Accenture iDefense (formerly Verisign) | https://www.accenture.com/us-en/service-idefense-security-intelligence |
AlienVault | https://www.alienvault.com/solutions/threat-intelligence |
Anomoli | https://www.anomali.com/products |
Cisco Secure Malware Analytics | https://www.cisco.com/c/en/us/products/security/threat-grid/index.html |
Crowdstrike Falcon | https://www.crowdstrike.com/events/threat-hunting-events/ |  | https://www.crowdstrike.com/resources/#filter=.tag-report |
Dragos - Focus on Industrial Control Systems | https://www.dragos.com |  |  |
FireEye iSight | https://www.fireeye.com/solutions/cyber-threat-intelligence/threat-intelligence-subscriptions.html |
IBM X-Force | https://www.ibm.com/security/xforce |  | Exchange | https://www.ibm.com/security/data-breach/threat-intelligence | https://www.ibm.com/security/data-breach/threat-intelligence
InfoBlox Active Trust | https://www.infoblox.com/products/bloxone-threat-defense/ |
Kaspersky | https://media.kaspersky.com/en/business-security/enterprise/Kaspersky_Threat_Intelligence_Services.pdf |
LogRythym Security Intelligence | https://logrhythm.com/ |
LookingGlass Cyber Threat Center | https://www.lookingglasscyber.com/ |
McAfee / Intel | https://intel471.com/ |
Microsoft | https://www.microsoft.com/securityinsights |
NetScout | https://www.netscout.com/sites/default/files/2019-06/EPDS_031_EN-1901-Arbor-Threat-Analytics.pdf |
Palo Alto Networks | https://www.paloaltonetworks.com/products/secure-the-network/autofocus |
Rapid7 Insight IDR |  |
RSA Netwitness Suite | https://www.rsa.com/en-us/products/threat-detection-response |
SecureWorks Global Threat Intelligence | https://www.secureworks.com/services/threat-intelligence/global-threat-intelligence |
Sqrrl - Amazon Web Services |  |
Symantec DeepSight | https://www.symantec.com/services/cyber-security-services/deepsight-intelligence |
Talos (CISCO Subsidiary) | https://www.talosintelligence.com/ |  |  |  |  |  |  |
Threat Connect | https://threatconnect.com/ |
Threat Quotient | https://threatq.com |
Verizon |  |
Webroot Brightcloud | https://www.brightcloud.com/ |
Amazon Web Services Elasticstack | https://aws.amazon.com/elasticsearch-service/?c=1&pt=3 |
Government |
DHS | Einstein 1,2,3 | https://www.cisa.gov/einstein |
Joint - CTIIC | Cyber Threat Intelligence Integration Center | https://www.dni.gov/index.php/ctiic-home |
Threat Intelligence Database | Database of IPs ranked by threat score | http://cinsscore.com/ |
Alerts - Threat Actors |  | https://www.cisa.gov/uscert/ncas/alerts |  |  |
Alerts - Vulnerabilities |  |  |
Other Interesting OSINT Tools and Information Resources in Cyber |
Open Threat Exchange OTX [Alienvault] | https://otx.alienvault.com/ |
Archive.org / Wayback Machine | https://web.archive.org/ |
Brave Browser | https://brave.com/firewall-vpn/ | Brave claims to have a built-in VPN & Firewall |
DirHunt | https://github.com/Nekmo/dirhunt | Web Crawler to find content where default access is not enabled |
Historical WHOIS | https://www.whois.net/ |
Hunchly | https://www.hunch.ly/ | Tool for automated web content collection |
Intrigue.io | https://github.com/intrigueio | Reconnaissance Tool |
Shodan | https://www.shodan.io/ | Database of IOT devices on the net |
Spiderfoot | https://www.spiderfoot.net/ | Automated Open Source Threat Intelligence |
Threat Connect | https://www.threatconnect.com | Tool for streamlining cyber threat intelligence |
TOR | https://www.torproject.org | Encrypted & anonymous routing service |
WebApp Information Gatherer WIG | https://github.com/jekyc/wig |
WHOIS | https://lookup.icann.org/ |
Trellix Threat Intelligence Exchange (formerly McAfee TIE) | https://www.trellix.com/en-us/services/advanced-cyber-threat-services/threat-intelligence-services.html |