ThreatFox vs OpenCTI

ThreatFox abuse.ch indicator-of-compromise feed for querying malware IOCs, threat actors, and malicious infrastructure via Pipeworx.

Connects to OpenCTI threat intelligence platforms with specialized tools for querying malware, threat actors, attack patterns, vulnerabilities, and campaigns, enabling sector-based threat analysis and relationship traversal between STIX entities.

MCP Servers

MCP Servers

—

—

—

—

—

—

—

—

—

57

7