CTM360 ThreatCover
Automatic deploy
Supported by community
Adversary & Campaign Insights
Overview
Imports CTM360 ThreatCover curated threat intelligence into OpenCTI via TAXII 2.1, with incremental polling, TLP markings, and CTM360 author attribution.
The OpenCTI CTM360 ThreatCover connector imports curated threat intelligence from the CTM360 ThreatCover module into OpenCTI. ThreatCover exposes its indicators and observables through a TAXII 2.1 collection; using the same TAXII handling as the generic OpenCTI TAXII2 connector (server discovery with token, API-key or basic authentication), it polls the configured collection on a schedule (incrementally, via the TAXII added_after filter and connector state), imports the returned STIX 2.1 objects, attributes them to a CTM360 ThreatCover author identity and applies a configurable TLP marking. It complements the existing CTM360 CyberBlindSpot, Cyna and HackerView connectors.