Mandiant
Deployable
Verified
Commercial Threat Intel
Overview
Import threat actors, malware, campaigns, vulnerabilities, and indicators from Mandiant Advantage (now part of Google Cloud).
The Mandiant connector imports comprehensive cyber threat intelligence from Mandiant (now part of Google Cloud) Advantage API V4 into OpenCTI. It provides access to Mandiant's threat actor profiles, malware families, campaigns, vulnerability reports, indicators of compromise (IOCs), and threat analysis reports. The connector supports incremental imports with configurable intervals for different entity types, custom TLP markings, and relationship inference for enhanced threat context.