ReversingLabs Spectra Intel Submission
Automatic deploy
Supported by Filigran
Detection & Response Enablement
Overview
Submits files and URLs to ReversingLabs Spectra Intelligence for analysis, enriching OpenCTI observables with malware classifications, MITRE tactics, indicators, and threat relationships.
Connector supports enrichment of observables and creation of indicators based on the result received from ReversingLabs Spectra Intelligence. Connector enables file submission to the Spectra Intelligence and file analysis. Based on the result, connector creates indicators, malwares, calculates score, adds labels, adds MITRE tactics and techniques and creates relationships between created objects for submitted observable. Connector enables file and url submission to the ReversingLabs Spectra Intelligence. The connector works for the following observable types: