Storage platforms

Any organization starting a CTI program will eventually have to address storing and manipulating intelligence data during their daily operation of collecting and enriching. Most organizations will look to open source solutions in the infancy of their programs, though many move to custom threat intelligence platforms as the needs of the organization grow. There are two primary open source solutions that most organizations decide to employ – OpenCTI and MISP.

OpenCTI

OpenCTI (https://www.opencti.io/) is an open source tool that many new CTI shops wind up deploying once they realize that they need to manage their collection and have a place to enrich and contextualize this information. According to their documentation, "OpenCTI is an open source platform that allows organizations to manage their cyber threat intelligence knowledge and observables. It has been created to structure, store, organize, and visualize technical and non-technical information...