Sectors
11
served
Feeds
435
in registry
Catalog sources
—
mapped
Standards
STIX · MISP · TAXII
interop
🎯 Sector-Specific Capabilities
Threat-intelligence workflows tuned per sector — the right sharing formats (STIX 2.1, MISP, TAXII 2.1), TLP handling, and analysis tooling for each community.
🏛 Government / CERT 9 feeds
National CERTs, agencies and public-sector SOCs.
- ✓ CISA KEV ingestion
- ✓ STIX 2.1 export
- ✓ TLP classification
- ✓ TAXII 2.1 endpoints
🎖 Military / Defense 0 feeds
Defense and air-gapped intelligence operations.
- ✓ Air-gapped offline STIX bundles
- ✓ TLP:RED handling
- ✓ Cyber kill-chain mapping
- ✓ MITRE ATT&CK correlation
🕵 Intelligence 0 feeds
National & competitive intelligence services.
- ✓ APT actor tracking
- ✓ Campaign attribution
- ✓ ATT&CK Enterprise/Mobile/ICS
- ✓ Nation-state IoC feeds
⚖ Law Enforcement 0 feeds
Investigations, takedowns and casework.
- ✓ Crypto wallet tracing
- ✓ Takedown / abuse-contact discovery
- ✓ Legal & LE referral directory
- ✓ Case export packages
💰 Financial / FinCrime 0 feeds
Banks, exchanges, AML/CTF and fraud teams.
- ✓ Sanctions/OFAC screening
- ✓ Crypto-address risk
- ✓ Mule & fraud IoCs
- ✓ FinCERT sharing
⚡ Critical Infrastructure 0 feeds
Energy, water, ICS/OT and utilities.
- ✓ ICS/OT advisories
- ✓ CISA KEV prioritisation
- ✓ Sector ISAC feeds
- ✓ Asset-aware alerting
🏥 Healthcare 0 feeds
Hospitals, HDOs and health-ISAC members.
- ✓ Health-ISAC feeds
- ✓ Ransomware early warning
- ✓ PHI-safe handling
- ✓ Sector advisories
🔬 Research / Academia 20 feeds
Threat researchers and academic labs.
- ✓ Bulk dataset export
- ✓ Corroboration / gap analysis
- ✓ Historical trend analysis
- ✓ Open dataset feeds
🤝 NGO / Civil Society 22 feeds
Rights groups, anti-trafficking and consumer protection.
- ✓ Anti-phishing feeds
- ✓ Human-trafficking / TIP intel
- ✓ Free public sharing (TLP:WHITE)
- ✓ Community submissions
🏢 Commercial / MSSP 3 feeds
Vendors, MSSPs and enterprise SOCs.
- ✓ Vendor API integration
- ✓ Enrichment (VT/AbuseIPDB/Shodan)
- ✓ Custom feed onboarding
- ✓ SLA-based updates
Showing the built-in sector catalog. Run upgrade-db-v3.php to store custom sector definitions and per-sector feed tagging.
🔄 Sharing & Interoperability Standards
| STIX 2.1 | Structured Threat Information eXpression. Export · TAXII 2.1 |
| MISP | Malware Information Sharing Platform events. Export · Feed |
| TLP | Traffic Light Protocol — WHITE / GREEN / AMBER / RED disclosure markings. |
| TAXII 2.1 | Pull collections for automated sharing. Collections · AIS |
| Detection | YARA / Sigma / Snort rule generation. Detection Rules |
📤 Sharing & collection
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron