Intel471 (Deprecated)

Intel 471 delivers structured technical and non-technical data and intelligence on cyber threats. This connector ingests STIX 2.1 objects from Intel 471's Titan cybercrime intelligence platform. Intel 471 Website: https://www.intel471.com This connector runs four streams at this time: | Stream | Operation | Produced objects|-----------------------|------------------------------------------------------------------------------------------------|--------------------------------------------------| Intel471IndicatorsStream | Fetches malware indicators from /indicators application programming interface (API) endpoint | Indicator and Malware SDOs related using Relationship object; URL, IPv4Address or File Observable related with the Indicator SDO using Relationship object| Intel471YARAStream | Fetches YARA rules from /yara API endpoint | Indicator and Malware SDOs related using Relationship object| Intel471IOCsStream | Fetches indicators of compromise (IoCs) from /iocs API endpoint | Indicator and Report SDOs and one of following Observables: URL, DomainName, IPv4Address, File. Both Indicator and Observable objects are related with the Report using Report's internal property object_refs. Observable and Indicator objects also are related using Relationship object| Intel471CVEsStream | Fetches Common Vulnerabilities and Exposures (CVE) reports from /cve/reports API endpoint | Vulnerability SDO Each stream can be enabled or disabled and configured separately (see "Configuration" section for more details).