Triage

Explore threat-related internet infrastructure observations

Best for: Defensive research into suspicious services, hosting patterns and reported command-and-control infrastructure.

Manage structured cyber-threat knowledge and relationships

Best for: Teams organizing indicators, entities, reports and relationships across multiple intelligence sources.

Orchestrate indicator enrichment across analysis services

Best for: Running controlled enrichment of hashes, domains or other permitted indicators across multiple configured sources.

Search community-shared malware indicators

Best for: Checking whether a scoped domain, IP or hash appears in reported malware-related indicator data.

Look up malware sample hashes and associated metadata

Best for: Defensive identification of a known file hash without opening or executing the file.