Abstract INTEL GALLERY

Weave your indicators and events together with the Abstract Data Fabric

IOC Data

• Threat Actor: Wizard Spider
• IOC: 44d88612fea8a8f36de82e1278abb02f
• Action: user.disable_mfa
• Event ID: evtw9k2jMzh0SIHSov0g

Example Corporation Information

• Display Name: Example Corporation
• ID: 00u1abc23DEFG456HIJK
• Credential Provider: OKTA

User Authentication Details

• Login: user_to_disable_mfa
• Request URI: /app/sso/abcdefg12345/sso/saml
• Reason: User successfully authenticated via SSO

Threat Actor Analysis

• Threat Actor: FinFisher Developers
• Malware Family: DarkComet

Additional Threat Data

• Authentication Method: PASSWORD
• URL: https://api.github.com/orgs/example-org/audit-log
• Avatar URL: https://github.com/images/error/octocat_happy.gif

Add context to data pipelines with streaming intelligence

Abstract's data fabric empowers your team with a simple ETL interface to enrich events with real time threat intelligence, enhancing detection accuracy and relevancy.

Supercharge analytics and correlate events against known threat actors

Seamlessly correlate events to known adversary infrastructure, providing real time insights into security breaches and outpacing adversary breakout times.

Robust Integrations Available in Seconds

• Upload in-house intelligence
• Connect to your ISAC