It's a CTI program management solution that provides lifecycle management, enrichment tools, and threat group tracking. It allows you to manage threat detection rules and offers an intel marketplace for onboarding.
Features
Entire Lifecycle Management
Manage all intelligence operations efficiently, ensuring full coverage from data collection to dissemination.
Enrichment at Your Finger Tips
Use data and enrich it with confidence, ensuring a complete understanding of the threat landscape.
Threat Group Tracking
Track threat groups targeting your business to stay ahead of potential attacks.
Threat Detection Rule Management
Manage rules for detecting threats to improve the effectiveness of your security measures.
Intel Marketplace
Quick onboarding with an Intel Marketplace to easily integrate and start using threat intelligence.
Structured Threat Intelligence
Allows users to structure, store, and share threat intelligence using a detailed format, enabling better analysis and collaboration among team members.
Customizable Reporting Templates
Enables users to build tailored reports using pre-defined templates, streamlining the reporting process and ensuring consistency in the presentation of threat information.
Automated Data Ingestion
Supports integration with external data sources to automatically ingest and update threat intelligence data, reducing manual workload and improving data accuracy.
Collaboration Tools
Facilitates team collaboration by allowing multiple users to work together on threat intelligence reports and datasets, enhancing communication and efficiency.
Real-time Updates
Provides real-time updates on threat data and reports, ensuring users have the latest information for decision-making processes.
Direction & Planning
Allows users to define objectives and identify resources needed for threat intelligence operations. Helps prioritize critical information and align with business goals.
Collection & Processing
Gathers data from various sources, then processes and organizes it into usable formats. Allows for integration with multiple data feeds and sources.
Analysis
Involves examining collected data to draw meaningful insights. Provides tools for pattern recognition and anomaly detection.
Production
Generates reports and intelligence products for decision-makers. Facilitates the customization of reports to meet specific organizational needs.
Dissemination & Feedback
Shares intelligence with relevant stakeholders and collects feedback. Supports different communication channels to ensure effective distribution.
Collection Requirements
Identify collection requirements for understanding threat actors and their activities related to your business. This helps in prioritizing what to track.
Essential Elements of Information (EEI)
Specific questions that need to be answered to inform the intelligence requirements. This helps in directing the focus of intelligence efforts.
Reports and Threat Hunts Association
Create connections between intelligence requirements and reports or threat hunts. This ensures that relevant information is easily accessible and organized.
Number of Reports Supporting Taskings
A dashboard view showing the number of reports associated with each intelligence requirement. Helps in identifying popular requirements and aligning them with customer needs.