XTM Platformの機能拡張とスケールアップ

More complete Dashboard than the Default one giving details on qualified Intelligence in the platform and letting experiment with more widgets and data sources.

A dashboard for monitoring vulnerability exploitation. It provides an overview of new vulnerabilities, exploitation volume, threats involved, associated TTPs, and more.

A dashboard to monitor ransomware activity sighted in your network.

Assess vulnerabilities that could affect your assets, with a view of criticality/severity, evaluate who is exploiting these vulnerabilities and how, and finally, project into the future with a view of the vulnerabilities.

Imports threat intelligence from the AlienVault OTX community platform into OpenCTI via the DirectConnect API, retrieving IOCs, threat actors, and campaigns from subscribed pulses.

Automated Indicator Sharing (AIS) is a CISA service that allows real-time exchange of machine-readable cyber threat indicators and defenses between public and private sectors, helping organizations enhance security and reduce attacks.

Monitor your Security Operations in the context of Incident management. Requires integrations with security systems able to feed OpenCTI with alerts and incidents.

Imports vulnerabilities actively exploited in the wild from the CISA Known Exploited Vulnerabilities (KEV) catalog into OpenCTI as STIX Vulnerability objects.