LastInfosec Enrichment
Supported by community
Detection & Response Enablement
Overview
Enriches file hashes and host observables in OpenCTI with LastInfoSec (Gatewatcher) threat feed data, providing enriched compromise evidence to accelerate threat analysis.
OpenCTI LastInfoSec connector will use the /v2/stix21/search_hash/{hash} and /v2/stix21/search_host/{host} API. Requirement : if you want to use LastInfoSec's intelligence, you need an API key. You could contact LastInfoSec's team here https://info.gatewatcher.com/en/lp/opencti LastInfosec has been acquired by Gatewatcher. LastInfoSec's Threat Feed is a data feed that makes it easier to detect threats within the information system. It contains enriched compromised evidences in order to reduce the time of threat analysis once detected.https://www.gatewatcher.com/en/our-solutions/lastinfosec/