Intel471 V2

Intel 471 delivers structured technical and non-technical data and intelligence on cyber threats. This connector ingests STIX 2.1 objects from Intel 471's Titan cybercrime intelligence platform. Version 2 of the connector differs from the OpenCTI Intel 471 Connector in that it replaces IoC stream with Reports streamand it introduces several enhancements. For full list please refer to the changelog. Intel 471 recommends using version 2 of the connector. Intel 471 Website: https://www.intel471.com This connector runs four streams at this time: | Stream | Operation | Produced objects|-----------------|------------------------------------------------------------------------------------------------------|--------------------------------------------------| Indicators | Fetches malware indicators from /indicators application programming interface (API) endpoint | Indicator and Malware SDOs related using Relationship object; URL, IPv4Address or File Observable related with the Indicator SDO using Relationship object| YARA | Fetches YARA rules from /yara API endpoint | Indicator and Malware SDOs related using Relationship object| Reports | Fetches reports from /reports, /breachAlerts, /spotReports and /malwareReports API endpoints | Report SDO and one or more SDO/SCO such as Malware, ThreatActor, DomainName, etc. related with this Report using Report's internal property object_refs.| Vulnerabilities | Fetches Common Vulnerabilities and Exposures (CVE) reports from /cve/reports API endpoint | Vulnerability SDO Each stream can be enabled or disabled and configured separately (see "Configuration" section for more details).