QIntel Crosslink
QIntel CrossLink is a tool that gives users access to a very rich set of underground criminal data. With this Playbook app, you can enrich threat data in ThreatConnect with QIntel Crosslink data, and then any key linkages such as Passive DNS, WHOIS, exposed credentials, or others can be used to informed decisions during investigations. Our new integration with QIntel Crosslink consists of a single Playbook app to perform multiple enrichment actions as part of an automated Playbook or Workflow investigation. The following actions are available:
- Search Communications
- Search Exposed Credentials
- Search PDNS Records
- Search Profiles
- Search WhoIs Records
This app can be found in the ThreatConnect App Catalog under the name: QIntel Crosslink
