Qintel

Details
Content
Dependencies
Version History

Supports the Qintel suite of products including Patch Management Intelligence (PMI), QSentry and QWatch.

Qintel solves hard cyber crime problems with innovative data and technology solutions. Qintel’s suite of products and services go far beyond any other firm thanks to our unmatched data, R&D investment and vast experience working with all sectors.

This pack provides various actions to integrate with Qintel’s suite of products.

What does this pack do?

Query Qintel’s Patch Management Intelligence (PMI) platform to gather context on vulnerabilities that are known by Qintel to be leveraged by adversaries
Query Qintel’s Qsentry platform for IP reputation data
Retrieve exposed credential alerts from Qintel’s QWatch platform

For more information, existing customers can visit our Integrations Documentation

Contact information:

Sales: contactus@qintel.com
Support: integrations-support@qintel.com

This pack provides various actions to integrate with Qintel’s suite of products.

What does this pack do?

Query Qintel’s Patch Management Intelligence (PMI) platform to gather context on vulnerabilities that are known by Qintel to be leveraged by adversaries
Query Qintel’s Qsentry platform for IP reputation data
Retrieve exposed credential alerts from Qintel’s QWatch platform

For more information, existing customers can visit our Integrations Documentation

Contact information:

Sales: contactus@qintel.com
Support: integrations-support@qintel.com

Incident Fields

Name	Description
Qintel QWatch Exposures

Incident Types

Name	Description
Qintel - QWatch Alert

Integrations

Name	Description
Qintel QWatch (Partner Contribution)	Qintel's QWatch system contains credentials obtained from dump sites, hacker collaboratives, and command and control infrastructures of eCrime- and APT-related malware. With this integration, users can fetch exposure alerts as incidents and discover exposed credentials associated with their organization.
Qintel QSentry (Partner Contribution)	QSentry queries help measure the likelihood that a user is masking their identity using publicly or privately available proxy or VPN services. The returns also flag any known fraud associations. QSentry aggregates data from Qintel’s proprietary Deep and DarkWeb research, as well as from commercially available anonymization services.
Qintel PMI (Partner Contribution)	Qintel’s Patch Management Intelligence (PMI) product simplifies the vulnerability management process by providing vital context around reported Common Vulnerabilities and Exposures. With this integration, users can query PMI to surface CVEs that are known by Qintel to be leveraged by eCrime and Nation State adversaries.

Layouts

Name	Description
Qintel - QWatch Alert

Playbooks

Name	Description
Process QWatch Alert - Qintel	Extracts exposure records from a QWatch alert
Indicator Enrichment - Qintel	Enriches indicators from Qintel products

Incident Fields

Name	Description
Qintel QWatch Exposures

Incident Types

Name	Description
Qintel - QWatch Alert

Integrations

Name	Description
Qintel QWatch (Partner Contribution)	Qintel's QWatch system contains credentials obtained from dump sites, hacker collaboratives, and command and control infrastructures of eCrime- and APT-related malware. With this integration, users can fetch exposure alerts as incidents and discover exposed credentials associated with their organization.
Qintel QSentry (Partner Contribution)	QSentry queries help measure the likelihood that a user is masking their identity using publicly or privately available proxy or VPN services. The returns also flag any known fraud associations. QSentry aggregates data from Qintel’s proprietary Deep and DarkWeb research, as well as from commercially available anonymization services.
Qintel PMI (Partner Contribution)	Qintel’s Patch Management Intelligence (PMI) product simplifies the vulnerability management process by providing vital context around reported Common Vulnerabilities and Exposures. With this integration, users can query PMI to surface CVEs that are known by Qintel to be leveraged by eCrime and Nation State adversaries.

Playbooks

Name	Description
Indicator Enrichment - Qintel	Enriches indicators from Qintel products
Process QWatch Alert - Qintel	Extracts exposure records from a QWatch alert

Required Content Packs (2)

Pack Name	Pack By
Base	By: Cortex XSOAR
Common Scripts	By: Cortex XSOAR

Optional Content Packs (0)

Pack Name	Pack By

All level dependencies (3)

Pack Name	Pack By
Common Scripts	By: Cortex XSOAR
Cortex REST API	By: Cortex XSOAR
Base	By: Cortex XSOAR

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Partner
Created	November 12, 2021
Last Release	December 4, 2024

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.

Integrations

Qintel QWatch

Qintel PMI

Qintel QSentry

Playbooks

Indicator Enrichment - Qintel

Integrations

Qintel PMI

Integrations

Qintel QSentry

Qintel QWatch

Qintel PMI

Integrations

Qintel QSentry

Qintel QWatch

Qintel PMI

PUBLISHER

PLATFORMS

INFO

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER