Cyware

The Polarity - Cyware integration searches Cywares bulk lookup endpoints for information on IPs, domains, emails and hashes. Informing analysts on the indicators threat levels, information about the indicators and how it is viewed by their team. Allowing analysts to be able to triage and take immediate actions on indicators.

Cyware Data Overview

• Summary Tags: When an analyst runs a search against Cyware they will quickly have an understanding of the Cyware Score associated with the indicators as well as the TLP and Confidence levels. Allowing them to quickly triage if the indicator is worth paying attention to or not.
• Description: When an analysts drills into the details of the indicator, there might be a description of the indicator that was provided by the analysts threat team.
• General Information: While looking at the details, analysts will also be able to quickly get an overview of the indicator and its threats. Quickly being able to see more context on the Cyware score, confidence and TLD. As well as when it was created, if its a false positive and more.
• Additional Information: Analysts will also quickly be able to see more context on the indicator with information like additional tags, sources and relations.