Skip to main content
Ctrl+K
Logo image Logo image

EclecticIQ Integrations

Site Navigation

  • EclecticIQ Integrations Life Cycle Policy
  • Generic
  • Integrations
  • Developers

Section Navigation

  • AlienVault
    • Incoming feed - AlienVault OTX Pulses Feed
  • Binary Defense
    • Incoming feed - Binary Defense Systems Artillery Threat Intelligence Feed
  • Bitdefender
    • Incoming feed - Bitdefender Advanced Threat Intelligence Domain Feed
    • Incoming feed - Bitdefender Advanced Threat Intelligence Hash Feed
    • Incoming feed - Bitdefender Advanced Threat Intelligence IP Feed
  • CentralOps
    • Enricher - CentralOps Domain Dossier
  • CIRCL
    • Enricher - CIRCL IPs related to SSL certificate
    • Enricher - CIRCL SSL Certificate Fetcher
    • Enricher - CVE Search
    • Incoming feed - CVE Search API
  • CISA
    • Incoming feed - CISA Known Exploited Vulnerabilities (KEV) Catalog
  • Cisco
    • Enricher - Cisco ASN Info
    • Enricher - Cisco DNS RR History
    • Enricher - Cisco Malicious Domains
    • Enricher - Cisco Related Domains
    • Enricher - Cisco Threat Grid
    • Enricher - Cisco Umbrella Threat Grid integration
    • Enricher - Cisco Whois
    • Incoming feed - Cisco Threat Grid Curated Feed
    • Incoming feed - Cisco Threat Grid Samples API
  • Cofense
    • Incoming feed - Cofense PhishMe Intelligence
  • Confluence
    • Outgoing feed - Confluence PDF
  • CrowdStrike
    • Enricher - CrowdStrike Enricher
    • Enricher - Crowdstrike Vulnerability Intelligence (Related Reports) Enricher
    • Enricher - Crowdstrike Vulnerability Intelligence (Related Threat Actors) Enricher
    • Incoming feed - Crowdstrike Falcon Intelligence Indicator Feed
    • Incoming feed - Crowdstrike Falcon Intelligence Reports Feed
    • Incoming feed - Crowdstrike Falcon Intelligence Threat Actor Feed
    • Incoming feed - Crowdstrike Falcon Intelligence Yara Rule Feed
    • Outgoing feed - Crowdstrike Falcon Custom IOC upload
    • Outgoing feed - Crowdstrike Falcon LogScale Outgoing feed
  • cybercrime-tracker.net
    • Incoming feed - Cybercrime Tracker
    • Incoming feed - Cybercrime Tracker Domain Provider
    • Incoming feed - Cybercrime Tracker Zbot Provider
  • Cybereason
    • Outgoing feed - Cybereason
  • CyberInt
    • Incoming feed - CyberInt IOC Daily Feed
  • Cyfirma
    • Enricher - Cyfirma Threat IOC Search Enricher
  • Digital Shadows
    • Incoming feed - Digital Shadows Searchlight Global Incidents Provider
    • Incoming feed - Digital Shadows Searchlight Private Incidents Provider
  • DomainTools
    • Enricher - DomainTools Iris Investigate
  • Dragos
    • Incoming feed - Dragos Threat Feed
  • DShield
    • Enricher - DShield
  • EclecticIQ
    • Incoming feed - EclecticIQ Commercial Sources Feed
    • Incoming feed - EclecticIQ Open Sources Feed
    • Outgoing feed - EclecticIQ branded PDF
  • Elasticsearch
    • Enricher - Elasticsearch sightings
  • Exabeam
    • Incoming feed - Exabeam Event Feed
    • Outgoing feed - Exabeam Outgoing Feed
  • EU-VD
    • Incoming feed - EUVD - European Union Vulnerability Database
  • Farsight Security
    • Enricher - Farsight DNSDB
  • Feedly for Threat Intelligence
    • Incoming feed - Feedly for Threat Intelligence Streams
  • Flashpoint
    • Incoming feed - Flashpoint Indicator feed
    • Incoming feed - Flashpoint Intelligence Reports Provider
  • Fox-IT
    • Enricher - Fox-IT InTELL Portal
  • GreyNoise
    • Enricher - GreyNoise API
    • Incoming feed - GreyNoise Noise Incoming Feed
  • Group-IB
    • Incoming feed - Group-IB APT Threat
    • Incoming feed - Group-IB Brand Abuse Phishing Kit
    • Incoming feed - Group-IB Compromised Data Accounts
    • Incoming feed - Group-IB Compromised Data Cards
    • Incoming feed - Group-IB Human Intelligence Threat
    • Incoming feed - Group-IB Malware C2
    • Incoming feed - Group-IB Attacks Phishing
    • Incoming feed - Group-IB Phishing Brand Abuse
    • Incoming feed - Group-IB Attacks Phishing Kit
    • Incoming feed - Group-IB Suspicious IP Socks Proxy
  • Google Threat Intelligence
    • Incoming feed - Threat Landscape
  • Hybrid Analysis
    • Enricher - HybridAnalysis
  • Infoblox
    • Outgoing feed - Infoblox NIOS
  • Intel 471
    • Enricher - Intel 471 Adversary Intelligence Enricher
    • Enricher - Intel 471 Posts Enricher
    • Incoming feed - Intel 471 Adversary Intelligence Feed
    • Incoming feed - Intel 471 Malware Intelligence Reports Feed
    • Incoming feed - Intel471 Spiderfoot Feed
    • Incoming feed - Intel 471 Vulnerability Intelligence
    • Incoming feed - Intel 471 Watcher Alerts
  • IntSights
    • Incoming feed - IntSights Alerts
  • Joe Security
    • Incoming feed - JoeSandbox Analysis Feed
  • Kaspersky
    • Enricher - Kaspersky
    • Incoming feed - Kaspersky APT Reports
    • Incoming feed - Kaspersky Threat Intelligence
  • Risk Analytics (formerly Malware Domains)
    • Incoming feed - Malwaredomains Provider
  • Risk Analytics (formerly Malware Domains)
    • Incoming feed - Malwaredomains Provider
  • MaxMind
    • Enricher - MaxMind GeoIP
  • Microsoft
    • Enricher - Microsoft Defender Threat Intelligence
    • Incoming feed - Microsoft Sentinel Alerts Feed
    • Outgoing feed - Microsoft Defender for Endpoint API
    • Outgoing feed - Microsoft Azure Sentinel Outgoing Feed
  • MISP
    • v1
      • Incoming feed
      • Enricher
      • Outgoing feed
    • v2
      • API Incoming feed
      • Default Incoming feed
      • Outgoing feed
  • Modat
    • Enricher - Modat
  • NCFTA
    • Incoming feed - NCFTA ListServ Intel
  • NSFocus
    • Enricher - NSFocus Intelligence
    • Incoming feed - NSFocus Feed Packet
    • Incoming feed - NSFocus Provider
  • NVD
    • Incoming feed - NVD - Vulnerability Intelligence Feed
  • OpenPhish
    • Incoming feed - OpenPhish
  • OpenResolve (Cisco)
    • Enricher - OpenResolve
  • Palo Alto Networks
    • Enricher - Palo Alto Autofocus
    • Incoming feed - Palo Alto Autofocus Hash Feed 1
    • Incoming feed - Palo Alto Networks Auto Focus Threat Intelligence
    • Incoming feed - Palo Alto PAN-OS Traffic Report
    • Outgoing feed - Palo Alto PAN-OS External Dynamic List
  • RiskIQ PassiveTotal (Microsoft)
    • Enricher - PassiveTotal IP/Domain
    • Enricher - PassiveTotal Malware
    • Enricher - PassiveTotal Passive DNS
    • Enricher - PassiveTotal Whois
  • PhishTank
    • Enricher - PhishTank
  • Proofpoint
    • Enricher - Proofpoint Email Threat
    • Incoming feed - Proofpoint Email Brand Defense
  • Qradar
    • Outgoing feed - Qradar Outgoing Feed
  • Qualys
    • Enricher - Qualys Enricher
  • Recorded Future
    • Alerts incoming feed (PlayBook)
    • Alerts incoming feed (Classic)
    • Analyst note incoming feed
    • Domain incoming feed
    • Hash incoming feed
    • IP address incoming feed
    • URL incoming feeds
    • Vulnerabilities incoming feed
    • Enricher
  • RIPEstat
    • Enricher - RIPEstat GeoIP
    • Enricher - RIPEstat Whois
  • Shadow Server
    • Incoming feed - Shadow Server
  • Shodan
    • Enricher - Shodan CVEs
    • Enricher - Shodan IPs & Domains
  • Sigma rules
    • Incoming feed - SigmaHQ Rules Feed
  • Silobreaker
    • Enricher - Silobreaker
    • Incoming feed - Silobreaker
  • Splunk
    • Enricher - Splunk sightings
  • SpyCloud
    • Enricher - SpyCloud Breach Data
    • Incoming feed - SpyCloud Breach API
    • Incoming feed - SpyCloud Watchlist Ingest
  • TeamT5
    • Incoming feed - TeamT5 Reports Threat Feed
    • Incoming feed - TeamT5 Vulnerability Threat Feed
  • ThreatCrowd
    • Enricher - ThreatCrowd
  • Red Sky Alliance (formerly Wapack Labs)
    • Incoming feed - Threat Recon
  • Unshorten.me
    • Enricher - Unshorten-URL
  • VirusTotal
    • Enricher APIv3
      • Domain
      • Hash
      • IP
      • URL
    • Enricher APIv2
    • Incoming feed
    • Incoming IOCs
  • VMRay
    • Incoming feed - VMRay Malware Submission Feed
  • XMCO
    • Incoming feed - XMCO YUNO advisories
  • YARA rules
    • Incoming feed - YARA Rules Project
  • ZoomInfo
    • Enricher - ZoomInfo Company Enricher
  • Zscaler
    • Outgoing feed - Zscaler Outgoing Feed

Qradar#

  • Outgoing feed - Qradar Outgoing Feed
# Release History


## Initial release

Release date: 22 July 2025

**Features:**

* Now provides the Qradar Outgoing Feed.

previous

Incoming feed - Proofpoint Email Brand Defense

next

Outgoing feed - Qradar Outgoing Feed