Threat Intelligence
General description
The Threat Intelligence module provides integration of Smart Monitor with IoC (feeds) data sources. The module enables automatic enrichment of events and incidents, as well as identifying additional incidents related to interaction with IoCs in the infrastructure.
The module content includes a set of dashboards, rules, inventory assets, Logstash configuration, and scripts for automated data collection from IoC providers.