Cisco Threat Grid
The Cisco Threat Grid CDF is a sandbox which allows the detonation of samples to generate analysis reports. The Cisco Threat Grid CDF for ThreatQ enables a user to ingest their organization’s sample analysis reports from Threat Grid. These samples can be filtered down by their threat score, so you are able to ingest only the detonations that your organization deems important to track.
Version
1.1.0Categories
Commercial Intelligence,Sandbox
ThreatQ Supported
CrowdStrike Falcon X Sandbox Operation
The Falcon X Sandbox operation submits files to the Falcon X Sandbox for analysis and fetches detonation reports. To ingest reports from Falcon X Sandbox, install the Falcon X Sandbox feed integration available on the ThreatQ Marketplace.
Version
1.1.1Categories
Enrichment & Analysis,Sandbox
Trend Micro Deep Security Connector
The Trend Micro Deep Security connector is designed to export data collections comprised of IPv4 and IPv6 Addresses from ThreatQ to Trend Micro Deep Security. These data collections are accepted as IP Lists within Trend Micro, and are typically used for policies.