External data sources wired into the platform. 21 live and serving the analyst-facing pages now. Items marked optional light up when the operator enables them; they fail soft until then so nothing else breaks.
Preferences
Dark mode
Currently using light theme
Reputation & IOC enrichment6
VirusTotaloptional
Multi-engine AV verdicts on hashes, URLs, domains, IPs
AbuseIPDBoptional
Community-reported abuse confidence score per IP
AlienVault OTXlive
Pulse subscriptions + cross-source IOC enrichment
GreyNoiseoptional
Internet-background-noise classification (benign scanners vs. targeted activity)
URLhauslive
Malware URL distribution feed (abuse.ch)
ThreatFoxlive
Recent IOC submissions tagged by malware family (abuse.ch)
Reconnaissance & exposure5
Shodanoptional
Host-enrichment for exposure scans (ports, banners, CVEs)
Censysoptional
Internet-scan host + certificate intelligence
crt.shlive
Certificate Transparency log search
CertStreamlive
Real-time SSL/TLS issuance firehose with keyword highlight