OpenCTI is an open-source platform designed to manage cyber threat intelligence. It structures, stores, and visualizes both technical and non-technical information about cyber threats using the STIX2 standards. The platform features a web application, GraphQL API, and integrates with tools like MISP and MITRE ATT&CK. OpenCTI supports importing and exporting data in various formats and offers Community and Enterprise editions, with the latter providing additional features. The platform also collects anonymized usage data to improve performance.

4m read timeFrom github.com
Post cover image
Table of contents
IntroductionObjectiveEditions of the platformDocumentation and demonstrationReleases downloadInstallationContributingCommunityAbout

Sort: