The Thales Cybels Threat Intelligence connector for ThreatQ allows you to ingest data from Cybels Threat Intelligence Feed.

The Cybels Threat Intelligence service is carried out by means of a daily watch. This makes it possible to identify new attacks and the associated IOCs, and then analyze them in order to enrich a knowledge base accessible to customers that have subscribed to the service.

The integration ingest the following system objects:

• Adversaries
• Campaigns
• Indicators
• Events
• Files
• Malware
• Tools
• Signatures
• Attack Patterns
• Vulnerabilities