PRODUCTS

Obstracts - Turn any blog into structured threat intelligence.

PRODUCTS September 30, 2024

Introducting the blog feed reader for cyber-security teams.

A Deeper Look at a TAXII Client

PRODUCTS DIY September 16, 2024

We built an open-source TAXII server, Arango TAXII Server. Here are some examples of how you can consume data from it using a TAXII Client.

Linking Knowledge Bases to Create a Cyber Threat Intelligence Graph

PRODUCTS DIY September 09, 2024

Joining the data held in disparate knowledge bases, including linking MITRE ATT&CK to CVEs, creates a much richer context for intelligence. Let me show you the logic of an open-source tool we built to do just that.

Graphing Credit Card Data Leaks Using STIX 2.1 Objects

PRODUCTS July 29, 2024

Turn card numbers into STIX 2.1 objects. Enrich the data with issuer information. Track transactions made by the card. Then link the cards and transactions to other STIX objects in your research (Actors, Incidents, etc.).

The Problems with Modelling Countries as STIX Objects (and How to Fix Them)

PRODUCTS July 14, 2024

Take the list of recognised countries and regions. Create STIX objects for them. Make them available to everyone so that the CTI world has a single way of representing them.

Full Text, Full Archive RSS Feeds for any Blog

PRODUCTS June 03, 2024

RSS and ATOM feeds are problematic (for our use-cases) for two reasons; 1) lack of history, 2) contain limited post content. We built some open-source software to fix that.