IPQualityScore Threat Intelligence

Overview

The IPQualityScore (IPQS) Threat Intelligence Pack provides enterprise-grade threat intelligence and risk scoring for multiple indicator types including:

• IP addresses
• Email addresses
• URLs
• Domains
• Files
• Leaked credentials

This integration leverages IPQS’s global intelligence network to detect malicious activity, fraud, phishing, malware, and compromised identities in real time.

---

Enhancements in This Pack

This pack has been extended with:

• Malware File & URL Scanning
• Dark Web Leak Intelligence (Dark Data™)

---

Use Cases

The playbooks included in this pack provide automated threat analysis and enrichment capabilities, including:

• Threat hunting and investigation
• IP reputation and risk analysis
• Email validation and fraud detection
• URL and domain analysis for phishing and malware
• Malware scanning for files and URLs
• Credential exposure monitoring
• Domain reputation analysis
• Threat prioritization using risk scores

Common Use Cases

• Threat intelligence enrichment
• Fraud detection and prevention
• Incident response automation
• Malware analysis workflows
• Credential exposure monitoring
• Phishing detection

Getting Started

Simply plug in your IPQS API key to enable real-time scoring with Cortex XSOAR.

---

Additional Information

For more information, please visit IPQualityScore Documentation.