MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and in the cybersecurity product and service community.

DomainTools is a leading provider of Whois and other DNS profile data for threat intelligence enrichment. DomainTools data helps security analysts investigate malicious activity on their networks. Using IOCs (Indicators of Compromise), including domains and IPs, analysts can build a map of connected infrastructure.

The AlienVault Open Threat Exchange (OTX) is the world’s most authoritative open threat information sharing and analysis network. OTX provides access to a global community of threat researchers and security professionals, with more than 50,000 participants in 140 countries, who contribute over four million threat indicators daily. OTX allows anyone in the security community to actively discuss, research, validate, and share the latest threat data, trends, and techniques.

Binary Ninja is a reversing platform.

3Receive data from the Certificate Transparency Log (CTL) network in real time. CTL provides a log for storing a cryptographically-verifiable immutable list of issued certificates from a central authority.

5Cuckoo Sandbox is the leading open source automated malware analysis system. You can throw any suspicious file at it and in a matter of minutes Cuckoo will provide a detailed report outlining the behavior of the file when executed inside a realistic but isolated environment.

Intel 471 provides adversary and malware intelligence for leading security, fraud and intelligence teams. The adversary intelligence provided by Intel471 focuses on infiltrating and maintaining access to closed sources where threat actors collaborate, communicate and plan cyber attacks.

Lastline Analyst™ provides your threat analysts and incident response teams with the advanced malware inspection and isolation environment they need to safely execute advanced malware samples and understand their behavior. Your security team gets the benefit of the Lastline team’s years of research on evasive malware. Lastline Analyst puts the combined expertise of our internationally recognized experts on advanced malware at your team’s fingertips.

LogPoint is a Security Information and Event Management (SIEM) solution, extracting existing log data and reporting on all critical incidents.