Greynoise
Automatic deploy
Supported by Filigran
Infrastructure & Attack Surface Visibility
Detection & Response Enablement
Overview
Enriches IP address observables in OpenCTI with GreyNoise data, classifying Internet background noise versus targeted attack activity to reduce false positives and focus on real threats.
GreyNoise is a system that collects, analyzes, and labels omnidirectional Internet scan and attack activity. The purpose of this connector is to answer to this question : "Is everyone else seeing this stuff, or is it just me?" In other words: "Is this just regular Internet background noise or is machine actually targeting and attacking ME specifically?"