When we talk of cyber threat intelligence platform, there are many commercial and open source tools that are available to gather, contextualize, and share intelligence. Some of the most well-known commercial tools available include the following:
- IBM X-Force Exchange
- Anomali ThreatStream
- Palo Alto Networks AutoFocus
- RSA NetWitness Suite
- LogRhythm Threat Lifecycle Management (TLM) Platform
- FireEye iSIGHT Threat Intelligence
- LookingGlass Cyber Solutions
- AlienVault Unified Security Management (USM)
The best-known open source tools available include the following:
- MISP
- OpenIOC
- OpenTAXII
- Yeti
- AbuseHelper
- sqhunter
- sqhunter
All the previously mentioned open source tools are very good, and have different capabilities to offer. I personally find that Malware Information Sharing Platform (MISP) is very useful both in terms of its functionality and its features. What makes...
