Anomali ThreatStream Plug-in

Anomali ThreatStream collects, curates and provides threat intelligence data from 230 open-source and numerous paid threat intelligence feeds. Data is normalized and de-duplicated for false-positive reduction so it can be explored and made strategic, tactical, operational and technical. Provides indicators of compromise (IOCs), attacker techniques/methodologies, and high-level risk information. This Security Orchestrator plug-in enables security teams to analyze and respond to threats. Use this plug-in to perform actions such as lookup file hash, IP, domain and submit a file for analysis.

Note : For customers who have SO 6.0.0/6.1.0 can download the plugin from Content Bundle