The Resecurity CDF integration allows analysts to automatically ingest threat intelligence data from Resecurity, ensuring timely and consistent access to the latest security insights for enhanced analysis and decision-making.

The integration provides the following feeds:

• Resecurity Threat Intelligence Botnets - ingests botnet data.
• Resecurity Threat Intelligence IOCs - ingests IOCs.
• Resecurity Threat Intelligence IPs - ingests IP Addresses.
• Resecurity Threat Intelligence Domains - ingests Domains.
• Resecurity Threat Intelligence Incidents - ingests Resecurity Incidents as ThreatQ Events.
• Resecurity Threat Intelligence DarkWeb - ingests DarkWeb Posts as ThreatQ Events.
• Resecurity Threat Intelligence Alerts - ingests alerts as ThreatQ Incidents.

The integrations ingests the following object types:

• Adversary
• Event
• Incident
• Indicator
• Malware
• Report