Enter your Bambenek C2 IP Feed API key and API secret, then click Save Credentials & Request Subscription.Click Subscribe on the Bambenek C2 IP Feed box.Your Bambenek C2 IP Feed API Key and API Secret.A subscription to the Bambenek C2 IP Feed.This self-curating feed monitors malicious networks to observe current criminal activity and collect relevant IP information, producing high-confidence data with very low false positives. Set up the Bambenek C2 IP Feed premium intelligence source in Splunk Intelligence Management. Enter your Bambenek C2 Domain Feed API key and API secret, then click Save Credentials & Request Subscription.Click Subscribe on the Bambenek C2 Domain Feed box.Splunk Intelligence Management administrator rights are required to activate this intelligence source.Your Bambenek Domain IP Feed API Key and API Secret.A subscription to the Bambenek C2 Domain Feed.This self-curating feed monitors malicious networks to observe current criminal activity and collect relevant Domain information, producing high-confidence data with very low false positives. Set up the Bambenek C2 Domain Feed premium intelligence source in Splunk Intelligence Management. Click Subscribe on the Alienware OTX Pulse box.Select Premium Intel to view the feeds available.Click the Marketplace icon on the left side navigation bar.All observables supported by Splunk Intelligence Management.Set up Alienware OTX Pulse premium intelligence source in Splunk Intelligence Management. Enter your Alienvault API key and click Save Credentials & Request Subscription.Click Subscribe on the Alienware OTX box.Click the Marketplace icon on the left side icon list.Splunk Intelligence Management administrator rights are required to activate this closed source feed.The OTX delivers more than 19 million threat indicators daily.

Set up the Alienware OTX premium intelligence source in Splunk Intelligence Management.Īlien Labs® Open Threat Exchange® (OTX™) is the world's first and largest truly open threat intelligence community of more than 100,000 threat researchers and security professionals in 140 countries. Splunk Intelligence Management validates the integration within 48 hours and sends an email when the integration is enabled.

Enter your Abuse IPDB API key and click Save Credentials & Request Subscription.

Select Premium Intel to view the available feeds.Click the Marketplace icon on the left side Navigation Bar.Log into the Splunk Intelligence Management web app.Splunk Intelligence Management administrator rights are required to activate this Premium Intelligence feed.A freemium or paid subscription to AbuseIPDB.The integration with Splunk Intelligence Management enables you to to view AbuseIPDB IP addresses as Splunk Intelligence Management reports. Set up the AbuseIPDB premium intelligence source in Splunk Intelligence Management.ĪbuseIPDB is a project that helps combat the spread of hackers, spammers, and abusive activity on the internet by providing a central blacklist for IP addresses that have been associated with malicious activity online. Recorded Future Vulnerability IntelligenceĪll the listed intelligence sources are compatible with intelligence workflows.Splunk Intelligence Management supports the following sources for threat intelligence:

Alienvault taxii feed