IKARUS Threat Intelligence Plattform for threat informationen, case management, und SOAR
The IKARUS threat.intelligence.platform (IKARUS TIP) offers three tools for your cyber defense strategy: threat information, case management and SOAR. Both the flexible platform concept of the IKARUS threat.intelligence.platform and the quality of the attributed and associated threat information are unique worldwide.
Threat Information Database
The IKARUS threat.intelligence.platform provides you with the combined expertise of leading global and national security service providers. We aggregate international and local threat intelligence so that it can be understood and used in the overall context.
The strategic, operational and tactical threat intelligence ranges from knowledge about an attacker’s malware and infrastructure to typical modus operandi, motives, popular vulnerabilities and preferred target companies or systems and sponsors.
There is also a focus on the local aspect: the IKARUS sensor network makes it possible to prioritize globally propagated threat information for Central Europe or even Austria.
Case Management
With Case Management, different workflows can be realized system-supported – depending on the use case. Both automated steps and manual tasks for which analysts are required can be implemented.
Within the IKARUS TIP, cases are documented in a way that allows a direct connection to the indicators or artefacts that have arisen. By linking cases, all relevant data from the past are automatically made available as soon as an indicator that is already known is viewed again.
SOAR (Security Orchestration, Automation and Response)
With the IKARUS threat.intelligence.platform, you can implement automation directly from the platform. SOAR supports you in developing any actions or integrations (use cases) yourself or applying them directly. These can be actions such as EDR containment, firewall or proxy rules or integrations such as MISP export/import, ticket systems or CMDB.
IKARUS offers the IKARUS threat.intelligence.platform not only as one comprehensive product. Our team of experts also supports you with integration, support and training. Your required use cases can be documented and implemented in the platform.
