• Last Updated
    May 14, 2024
  • Version
    1.0.0
  • Compatibility
    ThreatQ >= v5.25.0
  • Cyware CSAP CDF

    ThreatQuotient

    Overview

    The Cyware CSAP CDF integration enables the automatic and periodic ingestion of alerts from Cyware CSAP. These alerts come into ThreatQ as Report objects, along with context such as tags, related malware, related threat actors, related indicators, attribution, and more.

    Cyware CSAP is a platform for sharing threat information and collaborating on security incidents. It gathers alerts from various sources, analyzes them, and helps security teams prioritize and respond to threats more quickly. This improves situational awareness and allows teams to work together effectively to defend against cyberattacks.

    The integration provides the following feed:

    • Cyware CSAP Alerts - ingests alerts from Cyware CSAP.

    The integration ingests the following system objects:

    • Adversaries
    • Attack Patterns
    • Indicators
      • Indicator Attributes
    • Malware
    • Reports
      • Report Attributes
    • Tags
    • Vulnerabilities

    Copyright © 2025, ThreatQuotient, Inc. All Rights Reserved. Privacy Policy