Threat intel platform
OpenCTI
Organize cyber threat intelligence and map relationships among actors, malware, and indicators.
About OpenCTI
OpenCTI is a cyber threat intelligence platform for organizing structured intelligence and relationships among entities such as threat actors, malware, and indicators.
What it does
- ✓Model connected intelligence entities and relationships.
- ✓Ingest and exchange selected structured threat data.
- ✓Visualize and explore intelligence context across sources.
Where it fits
- ↗Maintaining an internal threat-intelligence knowledge graph.
- ↗Correlating indicators with campaigns and techniques.
- ↗Supporting threat-analysis reporting and collaboration.
Next steps
Review the official OpenCTI deployment and connector documentation and define source-quality rules before ingestion.