KELA's Technical Cybercrime Intelligence

As part of its ongoing mission to empower organizations to neutralize cyber threats, KELA introduces its Technical Cybercrime Intelligence: automatic detection of potentially compromised IPs and domains involved in cybercrime activity, detected in cybercrime sources such as closed forums, illicit markets, automated cybercrime shops, instant messaging channels used by criminals, and more. This intelligence is available to consume via Snowflake as a machine-readable feed and can be easily integrated into your security appliances.

Use KELA’s Technical Intelligence to monitor the latest compromised network assets that can be exploited by threat actors for their next cyber attack. Such assets can be abused to serve as an attack infrastructure (for example, as a C2 server) or as an attack vector such as phishing attacks.

Easily integrate KELA's Technical Cybercrime Intelligence into your SIEM, SOAR, or any other security solution, and get full coverage of your cybercrime attack surface to protect your organization from potential threats before they cause harm.

Tables:
- Observables

Fields Included:
- IP/Domain
- Description
- STIX Pattern
- STIX object
- Source info

搜集汇总

背景与挑战

背景概述

该数据集提供自动检测的网络犯罪相关IP和域名情报，数据源自犯罪论坛等渠道，可通过Snowflake集成至安全设备，用于监控潜在攻击资产并预防网络威胁。包含IP/域名、描述等字段的Observables表。