Integration · Research and lookups
OpenCTI
Matches against your OpenCTI knowledge, and can share decoy-seen addresses back if you turn it on.
What Kandaro does with it
Kandaro SOC and OpenCTI.
Reputation and context for the addresses, domains and files in a case.
- Lookups
Checks the addresses, domains and files in a case against it.
How it connects
Pick the way that fits.
- Vendor API
Kandaro calls the vendor’s API with the access you grant.
What Kandaro needs
What you set up once.
- An API token for your OpenCTI platform.
Research and lookups
More tools like this.
AbuseIPDB
How often an address has been reported for abuse. Can also share addresses that touched your decoys, if you turn it on.
- Lookups
- Vendor API
VirusTotal
What security vendors say about a file hash, domain or address.
- Lookups
- Vendor API
GreyNoise
Whether an address is a known internet scanner or a targeted attacker.
- Lookups
- Vendor API
Connect OpenCTI to Kandaro SOC.
Request early access to Kandaro SOC, or start a 14-day trial of Kandaro Deception today.
Deception trial: card required · cancel before day 14 and pay nothing