Threat intelligence sharing with Tines
Blog post from Tines
In the blog, Tines.com discusses how organizations can efficiently share threat intelligence indicators of compromise (IOCs) across multiple platforms using their Security Orchestration, Automation, and Response (SOAR) platform. Tines simplifies the process of distributing IOCs to popular threat intelligence platforms such as AlienVault, Trustar, Facebook Threat Exchange, and others, by automating the sharing process and eliminating the need for pre-built integrations. The platform allows security teams to easily create "Stories" and "Actions" to manage the sharing process without additional coding, facilitating integration with various tools in a company's security stack. This approach not only streamlines the sharing of threat intelligence but also enhances collaboration and data integration, helping detect and mitigate malicious activities more effectively. The blog emphasizes the importance of using platforms that peers also utilize, with features such as Rest APIs for seamless integration, and highlights the ability to automate the creation and updating of threat intelligence entries across different platforms, thereby improving the quality and accessibility of threat data.