With this Playbook app, you can integrate ThreatSTOP DNS and IP threat intelligence directly into ThreatConnect. ThreatSTOP aggregates threat intelligence from hundreds of sources to define custom policies loaded on Firewalls and DNS Servers to block malicious connections and DNS lookups. The “Active IOCs” integration between ThreatSTOP and ThreatConnect automates the import of the IOCs from ThreatSTOP Policies into the ThreatConnect TIP. This provides users with the ability to:
- Browse the IOCs in their current ThreatSTOP policies and view their metadata.
- Leverage their ThreatSTOP Policies in ThreatConnect playbooks.
This app can be downloaded by clicking the install button on the left.