threat intel data integration besides crowdstrike?

Follow

Bowei Chi

• September 30, 2019 21:11
• Edited

Are there any resource / documentation on building a threat intel app much like the crowdstrike app but using a different source to correlate the intel data?  The alternative source can be a REST endpoint or bundled data downloads.  TIA!

0

• 

  Raul Lapaz

  • March 19, 2020 10:15

  I guess that is the only source available in sumo. I use CSV lookups to enrich the data and correlate with malicious sources.

  0

  Comment actions Permalink

Please sign in to leave a comment.