
Apr 1, 2025
1.0.0
ThreatQ versions >= 5.12.1
Bolster.ai CDF
Overview
The Bolster.ai CDF integration allows users to ingest intelligence aggregated through Bolster.ai’s playbooks. Intelligence provided includes:
- Web intelligence - phishing, scam, and other suspicious websites.
- Social media intelligence - links to fraudulent social media pages/accounts.
- App store intelligence - potentially fraudulent apps.
- Dark web intelligence - leaked/compromised credentials, as well as leaked credit cards or PII. All data is subject to how you’ve configured the playbooks within Bolster.ai.
The integration provides the following feed:
- Bolster.ai Playbooks - ingests intelligence from configured Bolster.ai Playbooks.
The feed provided ingests the following object types:
- Adversaries
- Compromised Accounts (Custom Object)
- Compromised Cards (Custom Object)
- Events
- Indicators
- FQDNs
- IP Addresses
- URLs