Anomali Partner Directory

The Shadowserver Foundation is a nonprofit organization with an altruistic mission to make the Internet more secure for everyone. Shadowserver provides free daily potential attack surface reports and identifies potential malware and malicious activity relevant to your organization’s network or constituency.

Silobreaker is an AI-native intelligence platform that unifies data, advanced analytics and human expertise to deliver high-quality insights where it matters most. Designed for security, threat and risk teams, the Silobreaker proprietary intelligence engine automates the collection, fusion and analysis of cyber, geopolitical and physical data. With PIR-driven workflows, agentic automation and executive-ready reporting, Silobreaker helps global enterprises and governments anticipate threats, accelerate decisions, protect their people, operations and assets, and build resilience with confidence.

This Spamhaus feed provides comprehensive intelligence on Botnet infrastructure (infected devices and controllers) and Command and Control (C2) infrastructure used in malware distribution and other malicious activities.

This integration uses multiple transforms and enrichments to obtain malware data from the ReversingLabs Spectra Analyze platform and transforms it into valuable threat hunting info.

The ReversingLabs Spectra Intelligence enrichment is a set of pivot and context-based functions that can be used to enrich threat hunting and analysis by introducing new and unique insights into the security workflow. It returns data transformations and enrichment visualizations from ReversingLabs Spectra Intelligence, the industry's most comprehensive source of reputation data, into Anomali ThreatStream workflows.

The Anomali ThreatStream App for Splunk empowers Splunk users to leverage threat intelligence to detect, prioritize, and response to security incidents. It provides Splunk users with threat data collected and curated from industry leading threat intelligence platform ThreatStream to correlate with your log data in Splunk, detect malicious activities in incoming and outgoing traffic, alert security teams, and provide you with detailed contextual information from a variety of threat sources (open source, commercial, Anomali Labs, customer internal, etc.).

SPUR's Context API provides hosted high-performance IP enrichment lookups suitable for automation platforms, scripts, and custom integrations. This enrichment provides ThreatStream users with additional context to IP address indicators. It also enriches each IP address with anonymity network information, precision geolocations, and estimated user counts.