Anomali ThreatStream

Supported OS Linux Windows Mac OS

marketplace

Overview

Anomali ThreatStream’s threat intelligence management automates the collection and processing of raw data, filters out the noise, and transforms it into relevant, actionable threat intelligence for security teams.

Anomali ThreatStream supports multiple threat models including Actors, Vulnerabilities, Attack Patterns, Malware, Incidents, and more. Threat modeling is a process by which potential threats, such as structural vulnerabilities or the absence of appropriate safeguards, can be identified, enumerated, and countermeasures are prioritized.

Anomali ThreatStream also has support for Observables generating in the environment. An observable is a piece of technical information that can detect a potential threat. They are derived from all data contained in the Intelligence System (Anomali ThreatStream) but are not always contextualized.

This integration monitors Observables triggered in Anomali ThreatStream as well as events generated for the Incident Threat Model.

Support

For support or feature requests, contact Crest Data through the following channels:


This application is made available through the Marketplace and is supported by a Datadog Technology Partner. Click Here to purchase this application.