Use Third-Party Enrichment Tools
You can enrich your nodes using third-party enrichment tools. It also allows you to enrich your node if no threat intelligence is in the CTIX platform.
You must add and configure your third-party enrichment tools before you can use this feature.
Right-click on the desired indicator and select Enrich.
The added third-party enrichment tools display.
Select the desired third-party software.
The selected tool enriches your node.
Following third party enrichment tools are available to enrich nodes in CTIX
Name of the Tool | Enriches |
Alien Vault | IP, URL, Hash, Domain |
Virus Total | IP, URL, Hash, Domain |
Shodan | IP, Domain |
Recorded Future | IP, Domain, URL, Vulnerability, Hash |
Polyswarm | Hash ( SHA256, MD5, SHA1) |
RiskIQ | IP, Domain, URL |
Cisco Umbrella | IP, Domain, URL |
Whois | IP, Domain |
Farsight DNSDB | IP, Domain |