Skip to main content

Mandiant Advantage Threat Intelligence

Download With Dependencies

Integrate your Mandiant Advantage Threat Intelligence data with Cortex XSOAR

Cortex XSOAR interfaces with Mandiant Advantage Threat Intelligence to allow you to easily query Mandiant's Threat
Intelligence information.

This pack enables you to query for Indicators of Compromise, CVEs, Campaigns, Threat Actors, or Malware Families, as well
as providing additional information about the relationships between these various entities.

What does this pack do?

  • Query for and enrich Indicators of Compromise (FQDNs, URLs, IP Addresses, and File Hashes)
  • Query for and enrich CVEs
  • Query for and view Threat Actors and Malware Families
  • Provide a feed of new and updated intelligence from the Mandiant Advantage Threat Intelligence API

Cortex XSOAR interfaces with Mandiant Advantage Threat Intelligence to allow you to easily query Mandiant's Threat
Intelligence information.

This pack enables you to query for Indicators of Compromise, CVEs, Campaigns, Threat Actors, or Malware Families, as well
as providing additional information about the relationships between these various entities.

What does this pack do?

  • Query for and enrich Indicators of Compromise (FQDNs, URLs, IP Addresses, and File Hashes)
  • Query for and enrich CVEs
  • Query for and view Threat Actors and Malware Families
  • Provide a feed of new and updated intelligence from the Mandiant Advantage Threat Intelligence API

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

CertificationRead more
Supported ByPartner
CreatedMay 3, 2023
Last ReleaseDecember 15, 2024
WORKS WITH THE FOLLOWING INTEGRATIONS:
DISCLAIMER
Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.