OpenCTI
OpenCTI is an open-source platform developed to configure, store and visualize cyber threat intelligence data. Based on STIX2 standards, the system allows technical and non-technical data to be associated with each other with GraphQL API support. The platform supports the import and export of data by working with tools such as MISP and MITRE ATT&CK.
OP
OpenCTI
90OpenCTI-Platform · SIEM & Security Monitoring
STARS10.2K
FORKS1.5K
COMMITS—
CONTRIBUTORS199
VERSION7.260728.0
UPDATEDtoday
threat-intelligencesiemstixApache-2.0
Common commercial products in this category: Splunk Enterprise Security, IBM QRadar, Microsoft Sentinel
What can it do?
- You configure and store technical and non-technical information on cyber threats according to STIX2 standards.
- By analyzing the relationships between the data, you make new inferences from existing information.
- By transferring data in different formats, you integrate the platform with tools like MISP and MITRE ATT&CK.
Heads up
- • High number of open issues (2,265)