USTAv4 Cyber Threat Intelligence Platform v1.0.6

Since 2012, we have been pioneering one of the first cyberthreat intelligence platforms ever developed. Our CTI platformU.S.T.A. (Unified Security Threat Alliance) entails a unique synergy of five main modules: Deep Sight, Brand Protection, Fraud Intelligence, Security Intelligence, and Attack Surface Management.

Author:
PRODAFT
Support:
partner
URL:
https://wwww.prodaft.com/about-us
Default data source:
USTA Account Takeover Prevention
AgentixXSIAM
Data Enrichment & Threat Intelligence

Incident fields (24)

Integrations (3)

Layouts (2)

Playbooks (1)

README

Since 2012, we have been pioneering one of the first cyberthreat intelligence platforms ever developed. Our CTI platformU.S.T.A. (Unified Security Threat Alliance) entails a unique synergy of five main modules: Deep Sight, Brand Protection, Fraud Intelligence, Security Intelligence, and Attack Surface Management.

What does this pack do?

This integration pack enables seamless integration of the USTAv4 platform with Cortex. It automates the process of fetching and managing incidents from the USTAv4 platform, as listed below:

  • USTAv4 Account Takeover Prevention
  • USTAv4 Stolen Credit Cards

In essence, this pack brings the core functionality of the USTAv4 platform into Cortex, enabling analysts to respond effectively to incidents without leaving the Cortex interface.

Additionally, the pack offers integration with the USTAv4 Threat Intelligence module for indicator enrichment. This feature retrieves enhanced information and reputation data for the following indicator types:

  • URL
  • File SHA-256
  • File SHA-1
  • File MD5
  • Domain
  • IPV4

How to Use It?

To get started, simply install the pack and configure the USTAv4 integration instances within Cortex. During configuration, you will need an active API key, which can be generated from the USTAv4 platform.