---
title: Anomali ThreatStream
description: Monitor Anomali ThreatStream Observables & Incident ThreatModel events
breadcrumbs: Docs > Integrations > Anomali ThreatStream
---

# Anomali ThreatStream
Supported OS marketplaceIntegration version1.0.4        Anomali ThreatStream - OverviewAnomali ThreatStream - Observables - 1Anomali ThreatStream - Observables - 2Anomali ThreatStream - Incidents
## Overview{% #overview %}

Anomali ThreatStream's threat intelligence management automates the collection and processing of raw data, filters out the noise, and transforms it into relevant, actionable threat intelligence for security teams.

Anomali ThreatStream supports multiple threat models including Actors, Vulnerabilities, Attack Patterns, Malware, Incidents, and more. Threat modeling is a process by which potential threats, such as structural vulnerabilities or the absence of appropriate safeguards, can be identified, enumerated, and countermeasures are prioritized.

Anomali ThreatStream also has support for Observables generating in the environment. An observable is a piece of technical information that can detect a potential threat. They are derived from all data contained in the Intelligence System (Anomali ThreatStream) but are not always contextualized.

This integration monitors `Observables` triggered in Anomali ThreatStream as well as events generated for the `Incident` Threat Model.

## Data Collected{% #data-collected %}

### Metrics{% #metrics %}

|  |
|  |
| **cds.anomali.threatstream.observables.confidence**(gauge)         | Confidence level of observables.        |
| **cds.anomali.threatstream.observables.retina\_confidence**(gauge) | Retina confidence level of observables. |

### Service Checks{% #service-checks %}

**cds.anomali.threatstream.status**

Returns `CRITICAL` if the user configurations are invalid or server authentication fails. Returns `OK` otherwise.

*Statuses: ok, critical*

## Support{% #support %}

For support or feature requests, contact Crest Data through the following channels:

- Support Email: [datadog.integrations@crestdata.ai](mailto:datadog.integrations@crestdata.ai)
- Sales Email: [datadog-sales@crestdata.ai](mailto:datadog-sales@crestdata.ai)
- Website: [crestdata.ai](https://www.crestdata.ai/)
- FAQ: [Crest Data Datadog Marketplace Integrations FAQ](https://docs.crestdata.ai/datadog-integrations-readme/Crest_Data_Datadog_Integrations_FAQ.pdf)

This application is made available through the Marketplace and is supported by a Datadog Technology Partner. Click Here to purchase this application.
