Threat Intel

Aggregates threat intelligence from five major security platforms: AlienVault OTX for community IOCs, AbuseIPDB for IP reputation data, GreyNoise for noise vs. targeted attack detection, and abuse.ch projects (URLhaus, MalwareBazaar, ThreatFox, Feodo Tracker) for malware tracking. Provides unified lookups across IPs, domains, file hashes, and URLs with dynamic tool enablement based on configured API keys.