Security News > 2024 > August > OpenCTI: Open-source cyber threat intelligence platform
OpenCTI is an open-source platform designed to help organizations manage their cyber threat intelligence data and observables.
The platform structures its data using a knowledge schema built on the STIX2 standards.
OpenCTI integrates with other tools and applications, such as MISP and TheHive, among others, enhancing its capability to serve as a central hub for cyber threat intelligence management.
The objective is to develop a comprehensive tool that enables users to effectively capitalize on technical and non-technical data while ensuring that every piece of information is traceable back to its source.
Key features include interlinking data points, tracking first and last-seen dates, assessing confidence levels, and more.
Once analysts within OpenCTI have processed and curated the data, the tool can infer new relationships from the existing ones, enhancing the understanding and visualization of the information.
News URL
https://www.helpnetsecurity.com/2024/08/21/opencti-open-source-cyber-threat-intelligence-platform/
Related news
- MISP: Open-source threat intelligence and sharing platform (source)
- IntelOwl: Open-source threat intelligence management (source)
- TAG-100: New Threat Actor Uses Open-Source Tools for Widespread Attacks (source)
- Cyber Threat Intelligence: Illuminating the Deep, Dark Cybercriminal Underground (source)
- Threat intelligence: A blessing and a curse? (source)