ONYPHE
Commercial Internet Scan Data & Mapping
Overview
ONYPHE connector enriches observables and indicators with Internet intelligence and mapping data.
The ONYPHE enrichment connector is designed to leverage the Ctiscan category of data to enrich observables, providing detailed Internet scan data and mapping for open ports, protocols, banners and relationships — including ASNs, organizations, certificates, DNS domains, technologies, ports, countries and analytical pivots such as Ja4s. In addition the Indicators can be enriched using the 'onyphe' pattern to run threat-hunting queries within the OpenCTI platform and import matching observables.