Skip to main content

Cyware Threat Intelligence eXchange

Intel Exchange Services

Intel Exchange includes the following services as Docker containers that are essential to perform activities such as platform access, management of background tasks, indexing, polling data, and more.

  • API Gateway provides the user management and authentication layer for Intel Exchange.

  • Integration service manages the third-party enrichment and actioning apps that are integrated with Intel Exchange.

  • Core service provides ingestion and normalization of data for the Cyware Query Language (CQL) and runs rules on the data.

  • Conversion service provides polling from various sources and formats and converts them into a single Intel Exchange format for ingestion.

  • Email service sends notifications and reports as emails.

  • Publishing service provides dissemination of threat data to all the supported formats and subscriber management.

  • Kafka database service queues key-value-based tasks and supports the background tasks queue in Intel Exchange.

  • Redis service works as a cache layer in the database layer and queues caching tasks in Intel Exchange.

  • PostgreSQL is used as a relational database to store atomic transitions. It also supports Intel Exchange product functions such as performance schema for monitoring, SSL function support, cache replication, and more.

  • Elasticsearch supports searching and indexing operations in the Intel Exchange application. It also helps in the quick retrieval of threat data when performing search operations.

  • ZooKeeper provides a centralized service for maintaining configuration information, naming, distributed synchronization, and providing group services that are used by Kafka.