threat intel data integration besides crowdstrike?

Are there any resource / documentation on building a threat intel app much like the crowdstrike app but using a different source to correlate the intel data?  The alternative source can be a REST endpoint or bundled data downloads.  TIA!