We are happy to announce that Speculus will soon be available in the Elastic Marketplace as a Threat Intelligence integration. You will be able to use our network threat intelligence feed directly within your Elastic environment.
Features
We chose the STIX format served over a TAXII server so the feed provides useful insight the moment it’s installed. This allows your security team to start hunting for malicious network activity immediately.
The integration works hand in hand with Elastic Security to:
- Enrich alerts with STIX threat indicators.
- Trigger indicator match detection rules.
- Visualize your network threat landscape through dashboards and reports.
Installation
The integration is deployed through the Elastic Agent. Installation instructions and answers to common questions are in our documentation: speculus.co/integrations/elastic
To learn more about what we do, visit our About Us page or reach out to us at [email protected].