Anomali Partner Directory

Companion threat intelligence feed for SWIFT customers via the SWIFT ISAC. The ISAC, part of the SWIFT CSP, is a dedicated part of swift.com through which SWIFT shares information related to security threats potentially impacting the SWIFT community. This information includes malware details such as file hashes and YARA rules, IoCs, as well as details on the Modus Operandi used by the cyber-criminals.

Anomali ThreatStream supports three intelligence feeds from Team Cymru. The Botnet Analysis & Reporting Service (BARS) feed provides in-depth analysis, tracking, and history of 40+ malware families that utilize unique control protocols and possibly encryption mechanisms. The Controller feed offers near-real-time identification of botnet command and control (C&C) IP addresses (IRC, http, and P2P) built for DDoS, warez, and underground economy to include bot types, passwords, channels, and our insight. The Reputation feed allows subscribers to monitor for infected computers visiting their networks to identify compromised hosts as they access their networks, thus enabling them to monitor or block these infected hosts before they can cause any damage.

Tenable delivers unparalleled coverage and comprehensive insight to enable you to detect vulnerabilities, assess risk, and prioritize remediation for every asset, in every environment.

Anomali ThreatStream has an enrichment integration available for Tenable Security Center -Tenable's on-premise risk and vulnerability management solution. This enrichment allows users to query their Tenable Security Center instance with a vulnerability, and view affected asset details in ThreatStream for further analysis.

ThreatWorx's Attenu8 Threat Intelligence offers machine-curated, AI-enhanced threat and vulnerability intelligence with advanced keyword based filtering and noise reduction.

ThreatBook CTI provides high-fidelity intelligence collected from alerts from real customer cases, using ThreatBook's 99.9% high-fidelity threat intelligence to help enterprises with compromise detection, alarm noise reduction, and focusing on real threats.

URLScan.io is a website scanner focused on analyzing all possible details about any established HTTP connection, site content, and relations with other sites. This enrichment helps ThreatStream users with analyzing and triaging suspicious URLs.