#ALIENVAULT THREAT EXCHANGE UPDATE#

Users can up-vote and comment on specific pulses to assist others in identifying the most important threats.

#ALIENVAULT THREAT EXCHANGE UPDATE#

Pulses can be exported as STIX, JSON, OpenloC, MAEC and CSV, and can be used to automatically update local security products. Users can subscribe to a “Pulse,” an analysis of a specific threat, including data on IoC, impact, and the targeted software. Users can share the IP addresses or websites from where attacks originated or look up specific threats to see if anyone has already left such information. In 2015, OTX 2.0 added a social network which enables members to share, discuss and research security threats, including via a real-time threat feed. The data is validated by the OTX platform then stripped of information identifying the participating contributor. Its automated tools cleanse, aggregate, validate and publish data shared by participants. Information sharing covers a wide range of issues related to security, including viruses, malware, intrusion detection and firewalls. The collaborative threat exchange was created partly as a counterweight to criminal hackers successfully working together and sharing information about viruses, malware and other cyber attacks.

įounded in 2012, OTX was created and is run by AlienVault (now AT&T Cybersecurity), a developer of commercial and open source solutions to manage cyber attacks. It has more than 180,000 participants in 140 countries who share more than 19 million potential threats daily. Open Threat Exchange (OTX) is a crowd-sourced computer-security platform. Umbrella: The AlienApp™ for Cisco Umbrella delivers advanced security orchestration capabilities between AlienVault® USM Anywhere™ and Cisco Umbrella (formerly OpenDNS), shortening the time from threat detection to response through security automation.Crowd-sourced computer-security platform Open Threat Exchange Developer(s)Ĭ/open-threat-exchange.Secure Firewall ASA: AlienVault provides a STIX formatted threat intelligence feed for customers using Firepower Management Center's Threat Intelligence Director (TID) to rapidly update detection against new and complex threats.In addition, it allows you to collect hourly events from Cisco Secure Endpoint through the USM Anywhere Job Scheduler.

It also enhances the threat response capabilities of USM Anywhere by providing orchestration and response actions to isolate or unisolate hosts based on risks identified in USM Anywhere. Secure Endpoints: The AlienApp for Cisco Secure Endpoint enables you to automate threat detection and response activities between USM Anywhere and Cisco Secure Endpoint.Pivot to AlienVault OTX UI via referring actions. SecureX threat response: Threat Response module to query AlienVault OTX for observables (IP, IPV6, domain, hash values) and return Sightings and Indicators from the 'Pulses' in AlienVault.AlienVault’s Unified Security Management (USM) solution integrates asset discovery, behavioral monitoring, vulnerability assessment, security information and event management (SIEM), and intrusion detection into an all-in-one platform designed and priced to ensure that organizations of all sizes with limited resources and security teams can effectively defend themselves against today’s advanced threats.

Alienvault threat exchange