RST IoC Lookup
Supported by Filigran
Detection & Response Enablement
Overview
Enriches IP, domain, URL, and hash observables in OpenCTI via the RST Cloud IOC Lookup API, adding malware associations, threat actor links, CVEs, and TTPs.
The RST IoC Lookup Connector to determine whether observables and indicators are malicious and worth detecting. This connector performs checks on IP addresses, domains, URLs, and hash values via the RST Cloud API. It enhances the capabilities of OpenCTI by providing an affordable way to enrich observables or indicators found on the Internet with related threat information such as malware, threat actors, tools, CVEs, TTPs, and more. (RST IoC Lookup).