Threat Feeds
126 threat feed integrations.
| Name | Pack | Category | Support | Tags |
|---|---|---|---|---|
| ACTI Indicator Feed | Accenture CTI Feed | Data Enrichment & Threat Intelligence | Partner |
Threat Intelligence Management
|
| AWS Feed | AWS Feed | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
Getting Started
Allow List
|
| AlienVault OTX TAXII Feed | AlienVault Feed | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
Plug & Fetch
Free Feed
|
| AlienVault Reputation Feed | AlienVault Feed | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
Plug & Fetch
Free Feed
|
| Anomali ThreatStream Feed | Anomali ThreatStream Feed | Data Enrichment & Threat Intelligence | Cortex |
TIM
Threat Intelligence
|
| Augur Security | Augur Security | Data Enrichment & Threat Intelligence | Community |
|
| AutoFocus Daily Feed Deprecated | AutoFocus by Palo Alto Networks | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
Palo Alto Networks Products
|
| AutoFocus Feed Deprecated | AutoFocus by Palo Alto Networks | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
Palo Alto Networks Products
|
| AutoFocusTagsFeed Deprecated | AutoFocus by Palo Alto Networks | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
Palo Alto Networks Products
|
| Azure AD Connect Health Feed | Microsoft Azure AD Connect Health Feed | Data Enrichment & Threat Intelligence | Cortex |
Allow List
|
| AzureFeed | Azure Feed | Data Enrichment & Threat Intelligence | Cortex |
Allow List
|
| Bambenek Consulting Feed | Bambenek Consulting Feed | Data Enrichment & Threat Intelligence | Partner |
Threat Intelligence Management
|
| BitcoinAbuse Deprecated | BitcoinAbuse Feed (Deprecated) | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
Getting Started
|
| Blocklist_de Feed | BlockList DE Feed | Data Enrichment & Threat Intelligence | Cortex |
Free Feed
Plug & Fetch
|
| BruteForceBlocker Feed | BruteForce Feed | Data Enrichment & Threat Intelligence | Cortex |
Plug & Fetch
Free Feed
|
| CSVFeed | CSV Feed | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
Generic Feed
|
| CTIX v3 | Cyware Intel Exchange | Data Enrichment & Threat Intelligence | Partner |
Threat Intelligence Management
|
| Cisco Secure Malware Analytics | Cisco Secure Malware Analytics | Data Enrichment & Threat Intelligence | Cortex |
Relationship
|
| Cisco WebEx Feed | Cisco WebEx Feed | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
Getting Started
Allow List
|
| Cloudflare Feed | Cloudflare Feed | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
Allow List
|
| Cofense Feed | Cofense Feed | Data Enrichment & Threat Intelligence | Partner |
Threat Intelligence Management
|
| Cortex XDR - IOC | Cortex XDR by Palo Alto Networks | Data Enrichment & Threat Intelligence | Cortex |
Palo Alto Networks Products
|
| Create-Mock-Feed-Relationships | Developer Tools | Data Enrichment & Threat Intelligence | Community |
|
| CrowdStrike Indicator Feed | Crowdstrike Falcon Intel Feed | Data Enrichment & Threat Intelligence | Cortex |
Relationship
|
| Crowdstrike Falcon Intel Feed | Crowdstrike Falcon Intel Feed | Data Enrichment & Threat Intelligence | Cortex |
Relationship
|
| Cyberint Feed | Cyberint | Data Enrichment & Threat Intelligence | Partner |
|
| Cyberint Premium Feed | Cyberint | Data Enrichment & Threat Intelligence | Partner |
|
| CybleThreatIntel | Cyble Threat Intel | Data Enrichment & Threat Intelligence | Partner |
|
| Cyjax Feed | Cyjax Feed | Data Enrichment & Threat Intelligence | Partner |
Threat Intelligence Management
|
| CyrenThreatInDepth | Cyren Threat InDepth Threat Intelligence | Data Enrichment & Threat Intelligence | Community |
Threat Intelligence Management
|
| DHS Feed | DHS Feed | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
|
| DHS Feed v2 | DHS Feed | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
|
| DShield Feed | DShield Feed | Data Enrichment & Threat Intelligence | Cortex |
Plug & Fetch
Free Feed
|
| Darkmon Feed | Darkmon | Data Enrichment & Threat Intelligence | developer |
TIM
Threat Intelligence
Threat Intelligence Management
Dark Web
Malware
Feed
|
| DeCYFIR Feed | DeCYFIR | Data Enrichment & Threat Intelligence | Partner |
Alerts
Security
Threat Intelligence Management
Threat Intelligence
|
| EclecticIQ Intelligence Center v3 | EclecticIQ Platform | Data Enrichment & Threat Intelligence | Partner |
|
| ElasticsearchFeed | Elasticsearch Feed | Data Enrichment & Threat Intelligence | Cortex |
Generic Feed
|
| Exodus Intelligence Vulnerabilities | Exodus Intelligence EVE Platform | Data Enrichment & Threat Intelligence | Partner |
|
| Fastly Feed | Fastly Feed | Data Enrichment & Threat Intelligence | Cortex |
Allow List
|
| FeedCyCognito | CyCognito Feed | Data Enrichment & Threat Intelligence | Partner |
Threat Intelligence Management
|
| FeedDomainTools | DomainTools Feed | Data Enrichment & Threat Intelligence | Partner |
|
| FeedExpanse Deprecated | Cortex Xpanse by Palo Alto Networks (Deprecated) | Data Enrichment & Threat Intelligence | Cortex |
Palo Alto Networks Products
|
| FeedMISPThreatActors | MISP Threat Actors | Data Enrichment & Threat Intelligence | Cortex |
Plug & Fetch
Free Feed
|
| FeedMandiant Deprecated | Mandiant Advantage Feed (Deprecated) | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
|
| FeedMandiantThreatIntelligence | Mandiant Advantage Threat Intelligence | Data Enrichment & Threat Intelligence | Partner |
Free Enricher
|
| FeedNVDv2 | NVD Feed 2.0 | Data Enrichment & Threat Intelligence | Cortex |
|
| FeedORKL | ORKL Threat Intel Feed | Data Enrichment & Threat Intelligence | Community |
Free Feed
Plug & Fetch
|
| FeedSOCRadarThreatFeed | SOCRadar ThreatFeed | Data Enrichment & Threat Intelligence | Partner |
|
| FeedSOCRadarThreatFeedV2 | SOCRadar | Data Enrichment & Threat Intelligence | Partner |
Threat Intelligence
|
| FeedServiceNow | ServiceNow Generic Feed | Data Enrichment & Threat Intelligence | Community |
Generic Feed
TIM
|
| FeedURLhaus | URLhaus Feed | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
Getting Started
Free Feed
Plug & Fetch
|
| FeedUstaThreatStream | USTA Cyber Threat Intelligence Platform | Data Enrichment & Threat Intelligence | Partner |
Breach
Threat Intelligence
|
| Feedly Feed | Feedly | Data Enrichment & Threat Intelligence | Partner |
Threat Intelligence Management
Free Feed
|
| Feodo Tracker Hashes Feed Deprecated | FeodoTracker Feed | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
Free Feed
Plug & Fetch
|
| Feodo Tracker IP Blocklist Feed | FeodoTracker Feed | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
Free Feed
Plug & Fetch
|
| FireEyeFeed | FireEye Feed | Data Enrichment & Threat Intelligence | Cortex |
TIM
|
| Flashpoint Vulnerability Feed | Flashpoint Vulnerability Feed | Data Enrichment & Threat Intelligence | Partner |
Threat Intelligence Management
Feed
MITRE ATT&CK
Plug & Enrich
IoT
Threat Intelligence
|
| FlashpointFeed Deprecated | Flashpoint Feed | Data Enrichment & Threat Intelligence | Partner |
Threat Intelligence Management
|
| GCP Whitelist Feed Deprecated | Google IP Ranges Feed | Data Enrichment & Threat Intelligence | Cortex |
Allow List
|
| Github Feed | GitHub Feed | Data Enrichment & Threat Intelligence | Cortex |
Free Feed
Plug & Fetch
Generic Feed
|
| Github Maltrail Feed | Github Maltrail Feed | Utilities | Community |
|
| Google IP Ranges Feed | Google IP Ranges Feed | Data Enrichment & Threat Intelligence | Cortex |
Allow List
|
| Google Threat Intelligence IoC Stream Feed | GoogleThreatIntelligence | Data Enrichment & Threat Intelligence | Partner |
Alerts
Attack
Threat Intelligence
Threat Intelligence Management
|
| Google Threat Intelligence Threat Lists | GoogleThreatIntelligence | Data Enrichment & Threat Intelligence | Partner |
Alerts
Attack
Threat Intelligence
Threat Intelligence Management
|
| GreyNoise Indicator Feed | GreyNoise Indicator Feed | Data Enrichment & Threat Intelligence | Partner |
Threat Intelligence
|
| Group-IB Threat Intelligence & Attribution Feed | Group-IB Threat Intelligence | Data Enrichment & Threat Intelligence | Partner |
|
| HelloWorld Feed | HelloWorld | Data Enrichment & Threat Intelligence | Community |
Getting Started
|
| IgniteFeed | Flashpoint Feed | Data Enrichment & Threat Intelligence | Partner |
Threat Intelligence Management
|
| IgniteFeedV2 | Flashpoint Feed | Data Enrichment & Threat Intelligence | Partner |
Threat Intelligence Management
|
| InfobloxThreatIntelligenceFeed | Infoblox Threat Intelligence Feed | Data Enrichment & Threat Intelligence | Partner |
Threat Intelligence
Security
Network
Feed
|
| Intel471 Actors Feed Deprecated | Intel471 Feed | Data Enrichment & Threat Intelligence | Partner |
Threat Intelligence
Relationship
|
| Intel471 Malware Feed Deprecated | Intel471 Feed | Data Enrichment & Threat Intelligence | Partner |
Threat Intelligence
Relationship
|
| Intel471 Malware Indicator Feed | Intel471 Feed | Data Enrichment & Threat Intelligence | Partner |
Threat Intelligence
Relationship
|
| JSON Feed | JSON Feed | Data Enrichment & Threat Intelligence | Cortex |
Getting Started
Generic Feed
|
| LOLBAS Feed | LOLBAS Feed | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
Free Feed
Plug & Fetch
|
| Luminar_IOCs_and_leaked_credentials | Luminar IOCs & leaked credentials | Data Enrichment & Threat Intelligence | Partner |
|
| MISP Feed | MISP Feed | Data Enrichment & Threat Intelligence | Cortex |
|
| MITRE ATT&CK Deprecated | MITRE IDs (Deprecated) | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
Free Feed
Plug & Fetch
|
| MITRE ATT&CK v2 | MITRE ATT&CK | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
Free Feed
Plug & Fetch
|
| Majestic Million | Majestic Million Feed | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
Getting Started
Free Feed
Plug & Fetch
|
| Malware Domain List Active IPs Feed Deprecated | MalwareDomainList Feed (Deprecated) | Data Enrichment & Threat Intelligence | Cortex |
|
| MalwareBazaar Feed | MalwareBazaar Feed | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
Free Feed
Plug & Fetch
|
| Mandiant Advantage Threat Intelligence | Mandiant Advantage Threat Intelligence | Data Enrichment & Threat Intelligence | Partner |
Free Enricher
|
| Microsoft Intune Feed | Microsoft Intune Feed | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
Allow List
|
| National Vulnerability Database | National Vulnerability Database Feed | Data Enrichment & Threat Intelligence | Community |
Free Feed
|
| NucleonCyberFeed | NucleonCyber | Data Enrichment & Threat Intelligence | Partner |
|
| Office 365 Feed | Office 365 Feed | Data Enrichment & Threat Intelligence | Cortex |
Getting Started
Allow List
|
| OpenCTI Feed Deprecated | OpenCTI Feed | Data Enrichment & Threat Intelligence | Cortex |
Free Feed
|
| OpenCTI Feed 4.X | OpenCTI Feed | Data Enrichment & Threat Intelligence | Cortex |
Free Feed
|
| Oracle Cloud Infrastructure Feed | Oracle Cloud Infrastructure Feed | Data Enrichment & Threat Intelligence | Community |
|
| Palo Alto Networks Security Advisories | Security Advisories by Palo Alto Networks | Vulnerability Management | Cortex |
Palo Alto Networks Products
|
| Palo Alto Networks Threat Vault v2 Feed | ThreatVault Feed | Data Enrichment & Threat Intelligence | Cortex |
|
| Plain Text Feed | Plain Text Feed | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
Generic Feed
|
| Prisma Access Egress IP feed | Palo Alto Networks - Strata Cloud Manager | Data Enrichment & Threat Intelligence | Cortex |
Palo Alto Networks Products
|
| ProofpointFeed | Proofpoint Feed | Data Enrichment & Threat Intelligence | Cortex |
|
| Public DNS Feed | Public DNS Feed | Data Enrichment & Threat Intelligence | Cortex |
Getting Started
Allow List
|
| RSS Feed | RSS Feed | Data Enrichment & Threat Intelligence | Cortex |
Getting Started
Threat Intelligence Management
Generic Feed
|
| Recorded Future Feed | Recorded Future Feed | Data Enrichment & Threat Intelligence | Cortex |
|
| ReversingLabs Ransomware and Related Tools Feed Deprecated | ReversingLabs Ransomware and Related Tools Feed (Deprecated) | Data Enrichment & Threat Intelligence | Partner |
Threat Intelligence Management
|
| SafeBreach v2 Deprecated | SafeBreach - Breach and Attack Simulation platform | Data Enrichment & Threat Intelligence | Partner |
|
| Salesforce Indicators | Salesforce Indicators | Data Enrichment & Threat Intelligence | Community |
|
| Secneurx Threat Feeds | Secneurx Threat Feeds | Data Enrichment & Threat Intelligence | Partner |
Threat Intelligence Management
|
| SecurityIntelligenceServicesFeed | Security Intelligence Services Feed | Data Enrichment & Threat Intelligence | Community |
|
| Sixgill_DVE_Feed Deprecated | Sixgill Darkfeed - Annual Subscription | Data Enrichment & Threat Intelligence | Partner |
|
| Sixgill_DVE_Feed v2 | Cybersixgill-DVE | Data Enrichment & Threat Intelligence | Partner |
Threat Intelligence
Dark Web
Malware
|
| Sixgill_Darkfeed | Sixgill Darkfeed - Annual Subscription | Data Enrichment & Threat Intelligence | Partner |
|
| Snort IP Blocklist Feed | Snort IP Blocklist Feed | Data Enrichment & Threat Intelligence | Community |
Free Feed
Plug & Fetch
|
| SpamhausFeed | Spamhaus Feed | Data Enrichment & Threat Intelligence | Cortex |
Free Feed
Plug & Fetch
|
| TAXII 2 Feed | TAXII Feed | Data Enrichment & Threat Intelligence | Cortex |
Generic Feed
|
| TAXIIFeed | TAXII Feed | Data Enrichment & Threat Intelligence | Cortex |
Generic Feed
|
| Talos Feed | Talos Feed | Data Enrichment & Threat Intelligence | Community |
Free Feed
Plug & Fetch
|
| ThreatConnect Feed | ThreatConnect Feed | Data Enrichment & Threat Intelligence | Cortex |
Threat Intelligence Management
|
| ThreatFox Feed | ThreatFox Feed | Data Enrichment & Threat Intelligence | Cortex |
|
| Tor Exit Addresses Feed | Tor Exit Addresses Feed | Data Enrichment & Threat Intelligence | Cortex |
Getting Started
Threat Intelligence Management
Free Feed
Plug & Fetch
|
| TwitterIOCHunter - Full Daily Feed | TwitterIOCHunter - Full Daily Feed | Data Enrichment & Threat Intelligence | Community |
Threat Intelligence Management
Getting Started
|
| Unit 42 Feed | Unit 42 Threat Intelligence by Palo Alto Networks | Data Enrichment & Threat Intelligence | Cortex |
TIM
Threat Intelligence Management
Palo Alto Networks Products
|
| Unit42 Feed Deprecated | Unit 42 Feed (Deprecated) | Data Enrichment & Threat Intelligence | Cortex |
|
| Unit42IntelObjectsFeed Deprecated | Unit 42 Intel (Deprecated) | Data Enrichment & Threat Intelligence | Cortex |
|
| Unit42v2 Feed Deprecated | Unit 42 ATOMs Feed (Deprecated) | Data Enrichment & Threat Intelligence | Cortex |
|
| VirusTotal Livehunt Feed | VirusTotal | Data Enrichment & Threat Intelligence | Partner |
Free Enricher
|
| VirusTotal Retrohunt Feed | VirusTotal | Data Enrichment & Threat Intelligence | Partner |
Free Enricher
|
| Xpanse Feed | Cortex Xpanse | Data Enrichment & Threat Intelligence | Cortex |
Palo Alto Networks Products
|
| ZeroDayLiveTIFUSION Feed | Zero Day Live TI FUSION Feed | Data Enrichment & Threat Intelligence | Community |
|
| Zoom Feed | Zoom Feed | Data Enrichment & Threat Intelligence | Cortex |
Getting Started
Allow List
|
| abuse.ch SSL Blacklist Feed | Abuse.ch SSL Blacklist Feed | Data Enrichment & Threat Intelligence | Cortex |
Getting Started
Threat Intelligence Management
Plug & Fetch
Free Feed
|
| iDefense Feed Deprecated | Accenture CTI (Deprecated) | Data Enrichment & Threat Intelligence | Partner |
|