CybelAngel

Imports CybelAngel claimed-attack threat intelligence into OpenCTI as STIX 2.1 objects. For every claimed attack, the connector creates Intrusion Sets for the threat actors, Locations for the targeted countries, Identity objects for the victim organizations and impacted industries, a Campaign per (threat actor, victim) pair, and the corresponding targets / attributed-to relationships. Authentication uses OAuth2 client credentials against the CybelAngel platform API.