ThreatConnect is the place where security
comes to work. The only platform to unite Cyber Risk Quantification
(RQ), Threat Intelligence Platform (TIP) and Security Orchestration
and Response (SOAR) capabilities, ThreatConnect is a decision and
operational support platform that aligns the entire security lifecycle
to the goal of reducing risk.
With ThreatConnect's Threat Intelligence
Platform (TIP), centralize the aggregation and management of threat
data. Collected intelligence has the ability to dictate decisions
being made across your technology stack. Send relevant and actionable
insights from the TIP to other tools with our wide breadth of
integrations and flexible Playbooks. Export Threat Intelligence
Reports and share the information with other teams to help your
organization stay up to date on relevant threats. As additional
context and associations are applied to an indicator, you are armed
with intelligence that should influence decision making.
Mandiant Threat Intelligence
The Mandiant Threat Intelligence
integration with ThreatConnect allows FireEye customers to seamlessly
ingest Threat Intelligence reports and Indicators into ThreatConnect.
Using ThreatAssess and CAL (Collective Analytics Layer), easily
determine the specific relevance of that data to your organization.
Drive indicator deployments to one of the many other integrated
systems, create dashboards to summarize information in real-time, and
collaborate through discussion to empower your teams. For more
information about the Mandiant Threat Intelligence integration with
ThreatConnect, see the configuration guide below.
The FireEye Helix Log Analytics
integration with ThreatConnect allows ThreatConnect users to export
data to FireEye Helix for alerting and detection within their
environment. Deploy the following indicator types from ThreatConnect
into Helix: Address, Host, Email Address, and File (MD5 or SHA1) with
control over the destination Indicator list name and filtering on the
severity and confidence of each indicator. Users can take immediate
actions to investigate, stop, and remediate potential threats at the
endpoint based on external threat intelligence. For more information
about the Mandiant Threat Intelligence integration with ThreatConnect,
see the configuration guide below.
For more information about our tech
partner integrations, contact us at: