ThreatConnect and Flashpoint Integration Overview

This document is a guide that outlines the integration of the ThreatConnect Platform with Flashpoint, designed to enhance threat intelligence capabilities for organizations. It explains how the ThreatConnect Platform helps users understand adversaries, automate workflows, and mitigate threats more effectively using threat intelligence. The integration allows security teams to access relevant data from Flashpoint, which combines automation with human-driven data collection, providing insights into various illicit activities. The guide details features such as the Finished Intelligence dataset, which offers analytical reports on cybercrime and other threats, and the access to Indicators of Compromise (IoCs) for seamless integration into workflows. Additionally, it describes the Collective Analytics Layer (CAL) that provides context to Flashpoint datasets, and the use of MITRE ATT&CK™ for a standardized approach to threat classification. The document also includes instructions on how to get started with the integration for existing ThreatConnect users.