Orion Malware
Supported by community
Detection & Response Enablement
Overview
Enriches observables in OpenCTI with Orion Malware analysis results, creating malware analysis objects and relationships between indicators and detected malware families.
This connector supports enrichment of observables via Orion Malware.The connector works for the following observable types: The STIX observables that can be created are:A grouping object and a malware analysis object are automatically created with all STIX relations between them.