An independent tool index
for incident response teams
A documented integration with OpenCTI. Connector availability does not establish every deployment or edition is supported.
Filter these toolsEach entry describes the documented operation and links to its source. A format reference, an optional connector and built-in execution are different capabilities. Check the note before shortlisting.
Confirm your product version, edition, connector and access requirements in the upstream instructions. These listings record documentation, not a tested configuration. Read the evidence standard.
2 tools with documented OpenCTI integration evidence.
Detection and monitoring · France
Read the tool profileThe optional HarfangLab Intel connector sends OpenCTI live-stream indicators to HarfangLab. Documented requirements include OpenCTI 6.4+, HarfangLab Threat Response 2.x+ and Python 3.11; changed patterns require deletion and recreation.
Threat intelligence · Italy
Read the tool profileAn OpenCTI analyzer looks up observables; a configured connector creates an observable and linked report for an IntelOwl analysis.
A missing tool may support this feature without having been checked in this research pass.
Send a source or correction