The Intel 471 Hunter Action enriches Malware and Adversary objects in a ThreatQ Data Collection with contextual intelligence from Intel 471. It uses the same search capabilities and object mappings as the Intel 471 Hunter Operation.

The integration provides the following action:

• Intel 471 Hunter - Search - searches Intel 471 for contextual intelligence related to Malware and Adversary objects in a ThreatQ Data Collection, returning associated threat objects and indicators.

The integration is compatible with the following object types:

• Adversaries
• Malware

The integration enriches the following object types:

• Adversaries
• Attack Patterns
• Campaigns
• Indicators
• Malware
• Tools

Note: This action is intended for use with ThreatQ TDR Orchestrator (TQO). An active TQO license is required for this feature.