Silent Push Details Threat-Intelligence Integrations for Google SecOps, Abstract Security and OpenCTI
Summary
Silent Push describes integrations that deliver infrastructure reputation and enrichment to Google SecOps, add IOFA context to Abstract Security data pipelines, and provide STIX-formatted threat intelligence to OpenCTI.
Key points
- The Google SecOps integration makes Silent Push reputation lookups, infrastructure enrichment and URL scans available within its Response IDE.
- Abstract Security can apply Silent Push IOFA context while telemetry moves through its data pipeline, before it reaches a SIEM or data lake.
- OpenCTI can ingest curated IOFA indicators through TAXII and STIX 2.1, and use a connector to enrich domains, IPs and URLs.
- OpenCTI enrichment includes infrastructure history, behavioral classifications such as C2, phishing and typosquatting, reputation scores and related campaign patterns.
- The integrations provide security teams with threat-intelligence context in their existing workflows and data pipelines.
Article Details
- Event Type
- Security product integration announcement
- Impact
- Silent Push enrichment is available in Google SecOps, Abstract Security, and OpenCTI. The integrations support analyst lookups within Google SecOps, enrichment before telemetry reaches downstream systems through Abstract Security, and STIX-native indicator ingestion and enrichment in OpenCTI.
People
Vendors
Abstract SecurityGoogle SecOps is a SIEM, Abstract Security is a data pipeline platform and OpenCTI is where your CTI team probably already lives.GoogleGoogle SecOps is a SIEM, Abstract Security is a data pipeline platform and OpenCTI is where your CTI team probably already lives.Silent PushDirector of Product Management, Silent Push
Products
Abstract SecurityGoogle SecOps is a SIEM, Abstract Security is a data pipeline platform and OpenCTI is where your CTI team probably already lives.Google SecOpsGoogle SecOps is a SIEM, Abstract Security is a data pipeline platform and OpenCTI is where your CTI team probably already lives.OpenCTIGoogle SecOps is a SIEM, Abstract Security is a data pipeline platform and OpenCTI is where your CTI team probably already lives.Silent Push Enrichment ConnectorSeparately, the Silent Push Enrichment Connector, officially part of the OpenCTI ecosystem, monitors domains, IPs, and URLs already present in your instance and retrieves matching Silent Push enrichment on a scheduled