GreyNoise
GreyNoise is an enrichment tool that enriches intelligence on IPv4 addresses and vulnerabilities, helping security analysts filter out noise from internet-wide scanning activity. Intel Exchange integrates with GreyNoise to enrich data related to IP addresses and vulnerabilities, offering insights into scanning behavior, malicious activity, and potential threats. This integration helps security teams reduce false positives and make informed decisions based on real-world internet traffic patterns.
Intel Exchange provides the following enrichment sources for GreyNoise:
GreyNoise: This source provides advanced enrichment for IPv4 addresses and vulnerabilities, offering deeper insights into malicious activity, threat actors, and scanning behavior. A premium subscription to GreyNoise is required to use this integration. For more information see GreyNoise.
GreyNoise Community (Free): This source enriches IPv4 addresses and vulnerabilities with basic intelligence on internet-wide scanning activity. It does not require a premium subscription to GreyNoise and is available from Intel Exchange v3.6.3.3. For more information see GreyNoise Community.