Dragos

The Dragos WorldView threat intelligence feeds, alerts, reports, and briefings focus on ICS threat intelligence, providing information and context that identify the malicious actors and activity targeting industrial controls networks globally.

The ThreatConnect integration with Dragos WorldView allows ThreatConnect users to import reports and indicators, along with all of their context, from the Dragos WorldView API into ThreatConnect. Dragos and ThreatConnect combine threat intelligence with network collection, aggregation, and analytics to provide customers with a real-time, relevant, and actionable feed of cyber events in ICS environments.

This app can be found in the ThreatConnect App Catalog under the name: Dragos WorldView.

The Polarity - Dragos integration searches indicators against Dragos Worldview API. Allowing analysts to have insights into ICS assets and malicious activity relating to infrastructure. Enabling analysts to quickly understand if their physical infrastructure is under attack and how to protect against it.