1. What are some commonly used threat intelligence platforms?
Here’s the restructured list of threat intelligence platforms, organized by region:
🇺🇸 United States
- Recorded Future
- CrowdStrike Falcon
- Anomali ThreatStream
- ThreatConnect
- FireEye / Trellix
- IBM X-Force Exchange
- Cisco Talos Intelligence
- Palo Alto Networks Unit 42
- Google Threat Intelligence
- Secureworks / Counter Threat Platform (Dell)
- Flashpoint
- Intel 471
- Cyble
- SOCRadar
- Black Kite Security
- Qintel
- ThreatQuotient (ThreatQ)
- Securonix
- Proofpoint
- DarkFeed
- Zerothreat
🇪🇺 Europe
- MISP
- OpenCTI
- EclecticIQ
- Kaspersky Threat Intelligence
- ESET Threat Intelligence
- ACTIX
- Project page: https://www.digitalsecuritycatalyst.com/actix
- IntelliCloak
- This is an EU project that enhances MISP. The project website can be found here: https://aegisresearch.eu/
- CTI-AI Project
- https://www.eclecticiq.com/ (Project page is hosted on EclecticIQ's website)
- SOCCER Project
- CounteR
🇷🇺 Russia
- Security Vision TIP
- Sber X-Threat Intelligence Platform
- Gard TI Feeds
🇨🇳 China
- ThreatBook (微步在线)
- Qi‑AnXin TI (奇安信威胁情报)
- NSFOCUS TI (绿盟科技)
- 360 TI (360数字安全)
- Tencent Threat Intelligence (腾讯威胁情报)
- Venusense Threat Intelligence (启明星辰)
- DBAPPSecurity (安恒信息)
- Sangfor (深信服)
- Antiy (安天)
- Rising Threat Intelligence (瑞星)
- Kingsoft Eagle Eye (金山鹰眼)
- Huawei Threat Intelligence (华为)
- Aliyun Threat Intelligence (阿里云)
- Tianji Youmeng RedQueen (天际友盟)
- NVDB (国家信息安全漏洞共享平台)
🇮🇳 India
- Foresiet Xtreme
- Seqrite Threat Intel
- RiskProfiler Digital TRISHUL
- Thales Cyber Shield
🇵🇸 Occupied Palestine (Israel)
- Cybersixgill
- KELA
- IntSights (now part of Rapid7)
- CyTwist
🇰🇷 South Korea
- Quaxar
- Genians Security Center
- Group-IB Unified Risk Platform
🇧🇷 Brazil
- Apura BTTng
- BRIntelcollector
- GitHub repository: https://github.com/devfoundsec/BRIntelcollector
- Axur
- OpenCTI.BR
- This is a community CTI deployment. The main OpenCTI website is https://www.opencti.io/.
🌍 Africa
- AfricaIntel (now SmartcomplyIntel)
- WACREN CTI Hub
- Resecurity + AfricaCERT
🇦🇺 Australia & Oceania
- ASD CTIS
- CYFIRMA
🇨🇦 Canada
- CCTX
- Flare
- Liferaft
- Dataminr
🌎 Global Platforms (Regional HQ varies)
- VirusTotal
- AlienVault OTX
- Group-IB
- Check Point
- Trend Micro
- Splunk
- Cisco Talos
🛠️ Open-Source Platforms (Community-driven, any region)
- MISP
- OpenCTI
- CRITIFENCE ThreatCrowd
- The ThreatCrowd community page can be found here: https://www.maltego.com/
- IntelMQ
- Yeti