ReversingLabs Spectra Intel Submission
Déploiement automatique
Supporté par Filigran
Detection & Response Enablement
Aperçu
Submits files and URLs to ReversingLabs Spectra Intelligence for analysis, enriching OpenCTI observables with malware classifications, MITRE tactics, indicators, and threat relationships.
Connector supports enrichment of observables and creation of indicators based on the result received from ReversingLabs Spectra Intelligence. Connector enables file submission to the Spectra Intelligence and file analysis. Based on the result, connector creates indicators, malwares, calculates score, adds labels, adds MITRE tactics and techniques and creates relationships between created objects for submitted observable. Connector enables file and url submission to the ReversingLabs Spectra Intelligence. The connector works for the following observable types: