The NSFOCUS CDF integration enables the automated ingestion of NSFOCUS Threat Intelligence (NTI) into the ThreatQ platform, providing analysts with timely and actionable insight into emerging cyber threats. Leveraging a global sensor network with strong visibility into North Asia, NSFOCUS delivers high-quality indicators of compromise, including IP addresses, domains, URLs, and file hashes. Each indicator is enriched with contextual metadata such as confidence, threat level, threat type, and category, allowing organizations to enhance threat analysis, accelerate response efforts, and strengthen proactive defense capabilities.

The integration provides the following feed:

• NSFOCUS Threat Intelligence IOCs - ingests NSFOCUS Threat Intelligence IOCs, such as domains, IP Addresses, and URLs into ThreatQ.

The integration ingests indicator type objects into the ThreatQ platform.