Threat Intelligence Software Resources

In cybersecurity attribution refers to the identification of the perpetrator of an attack using threat intelligence. This is useful for cybersecurity teams because threat actors typically reuse tactics, techniques, and procedures from their previous attacks. This information can be used by security teams during red teaming exercises to emulate a real attack, by threat hunters proactively looking for signs of intrusion, and during incident response.

Security Operations Analysis Tool. Think you got a pieces of malware and want to know more about it and verify that it is malware, this is great place to start. Accepts URL's (beta), files and even checks endpoints. Powerful tool and easy to use.

IBM X-Force Exchange is a cloud-based threat intelligence platform that allows you to consume, share and act on threat intelligence. It enables you to rapidly research the latest global security threats, aggregate actionable intelligence, consult with experts and collaborate with peers. What content is available through the X-Force Exchange? The X-Force Exchange provides a combination of observable indicators including vulnerabilities, malware, malware families, IP reputation, URL reputation, web applications, pDNS, WHOIS information, malicious domains, and higher-order intelligence such as actors, campaigns, incidents and TTPs. X-Force Threat Intelligence provides curated analysis of threats, groups, malware and industries. https://exchange.xforce.ibmcloud.com/ Follow us on Twitter: https://twitter.com/xforce