Anomali Partner Directory

RESONANCE by Spider Silk identifies specific threats, data leaks, and vulnerabilities on publicly-accessible assets.

‍

X-Force Premier Threat Intelligence contains the latest threat information findings across X-Force investigations and research. You get OSINT Advisories, Malware Analysis reports, Threat Group profiles, and Threat Activity indicators.

Identify infected devices, bots & malware. Prevent DDoS, unauthorized logins, network breaches & more. Endpoint data gathered from 640 million users monthly via JavaScript sensors placed on 12 million URLs.

Accelerate time-to-intel with Cybersixgill's best-in-market threat intelligence from the deep and dark web. Cybersixgill's premium underground intelligence collection capabilities, real-time collection, and advanced warning about IOCs will help you keep your edge against unknown threats.

‍

Bitdefender Reputation Threat Intelligence Feeds & Services represents a broad portfolio of real-time, highly curated threat data, covering a wide area of IoCs, including all typology of malicious domains, IPs, URLs, filehashes, and known vulnerabilities. Available feeds contain dedicated IoCs for Command and Control (C2), mobile malware, ransomware, and phishing/fraud.

This Spamhaus feed provides comprehensive intelligence on Botnet infrastructure (infected devices and controllers) and Command and Control (C2) infrastructure used in malware distribution and other malicious activities.

ThreatBook CTI provides high-fidelity intelligence collected from alerts from real customer cases, using ThreatBook's 99.9% high-fidelity threat intelligence to help enterprises with compromise detection, alarm noise reduction, and focusing on real threats.

Cyberint's digital risk protection enhances threat intelligence using IOCs from OSINT and deep-dark-web sources. It offers a query API and daily feed to enrich security tools, blacklists, and threat intelligence with detailed indicators and scores.

Nextwave is a leading Cybersecurity and IT distributor in Thailand, specialized in advanced and value added solutions. Since 2013, over 10 years, we have been delivering trustworthy services through our channel partners and providing consultants to end users.

SEKOIA.IO CTI is a mix of exclusive SEKOIA.IO threat intelligence data coming from C2 trackers, VT trackers, honeypots and refined OSINT data. The threat intelligence provided by SEKOIA.IO is easily actionable within Anomali ThreatStream as it's highly structured in STIX 2.1, fully contextualized and built for detection purposes. SEKOIA.IO CTI subscription includes an API and a web portal access.

‍

Dataminr Pulse for Cyber Risk brings the leading AI-powered real-time alerting into Anomali, easily fitting into your workflows and enabling rapid identification and mitigation of emerging threats so you can deliver faster time to detection and response.

‍

‍

Anomali ThreatStream supports three intelligence feeds from Team Cymru. The Botnet Analysis & Reporting Service (BARS) feed provides in-depth analysis, tracking, and history of 40+ malware families that utilize unique control protocols and possibly encryption mechanisms. The Controller feed offers near-real-time identification of botnet command and control (C&C) IP addresses (IRC, http, and P2P) built for DDoS, warez, and underground economy to include bot types, passwords, channels, and our insight. The Reputation feed allows subscribers to monitor for infected computers visiting their networks to identify compromised hosts as they access their networks, thus enabling them to monitor or block these infected hosts before they can cause any damage.

IPQualityScore (IPQS) provides Anomali ThreatStream users with enterprise-grade detection for sophisticated abuse. The IPQS Fraud and Risk Scoring Enrichment provides enterprise grade fraud prevention, risk analysis, and threat detection. Analyze IP addresses, email addresses, URLs, and domains to identify sophisticated bad actors and high risk behavior. IPQS uses a unique data set, gathered by our proprietary honeypot network that captures advanced abuse such as residential botnets, phishing, hijacked domains, and any IOC that's been associated with abusive behavior across our partner reporting network, which analyzes over 10,000 abuse reports per second.