ZeroFox
ZeroFox provides enterprises AI-powered protection, intelligence and disruption to identify and dismantle external threats across the public attack surface. The ZeroFox Platform combines advanced AI-driven analysis to detect complex threats on the surface, deep and dark web, fully managed threat intelligence services with threat analysts that become an extension of your team, and automated remediation to effectively disrupt threats.
Specialties
Integrations
ZeroFox Alerts
The ThreatConnect integration with ZeroFOX allows ThreatConnect customers to import threat-related alerts along with all of their context from the ZeroFOX platform into ThreatConnect. Within ZeroFox, an alert provides information about a potential threat to an entity: an executive, a domain, or a location, to help analyze social-media-based threat indicators such as profiles, pages, posts, and comments from a number of different sources.
This integration is available for download on the ThreatConnect Marketplace.
Downloads
Related Resources
Built By Partner
ZeroFox Domains
The ThreatConnect integration with ZeroFOX allows ThreatConnect customers to import threat intelligence domain feeds from ZeroFOX into ThreatConnect. This integration is available for download on the ThreatConnect Marketplace.
Downloads
Related Resources
Built By Partner
ZeroFox Key Incidents
This ZeroFox integration with ThreatConnect allows ThreatConnect users to import Key Incidents along with
all of their context from the ZeroFox platform into ThreatConnect.
The ZeroFox Key Incidents integration is a Threat Intelligence Feed type of integration that can be enabled as a standalone job or using ThreatConnect’s Feed Deployer, which adds the feed to your current list of Intelligence sources. Through each integration job, ZeroFox Key Incidents are imported as Incident Groups to the ThreatConnect platform.
This integration is available for download on the ThreatConnect Marketplace.
Downloads
Related Resources
Built By Partner
ZeroFox Threat Intelligence
This ZeroFox integration with ThreatConnect allows ThreatConnect users to import threat intelligence data along with all of their context from the ZeroFox platform into ThreatConnect.
The ZeroFox ThreatIntel integration is a Threat Intelligence Feed that can be enabled as a standalone job or using ThreatConnect’s Feed Deployer, which adds the feed to your current list of Intelligence sources.
The ZeroFox ThreatIntel app can leverage multiple threat intelligence endpoints to ingest data into the ThreatConnect platform, depending on the user’s access and scope within the ZeroFox ThreatIntel API.
Available endpoints include:
- Botnet
- Disruption
- Exploits
- Vulnerabilities
- C2 Domains
- Phishing
- Malware
- Ransomware
- Compromised Credentials
Downloads
Related Resources
Built By Partner
