Cybersixgill: Darkfeed

Snowflake users can get early warnings of malware threats & block items that threaten their organization

Description:

Darkfeed by Cybersixgill is the industry’s most comprehensive deep and dark web intelligence stream of IOCs. Use the data to track, trend and gain data-driven actionable insights to the IOCs collected by Darkfeed. Gain better understanding of malware TTPs and trends. The Darkfeed’s IOCs contain both standard STIX properties and custom Cybersixgill properties, providing contextual information. The Darkfeed is comprised by a number of subfeeds, each presenting a different type of IOC. The subfeed can be identified by the “feedID” and “feedname” fields

The use of Cybersixgill’s data is subject to the terms of the following EULA: https://secureaccess.cybersixgill.com/auth/resources/9juj5/login/keycloak-sixgill/docs/EULA-with-API-reference.pdf

Sample Tables:
A table that consists of IP addresses, URLs, Domains and Hashes

Fields Included:
-created
-description
-external_reference
-id
-labels
-lang
-modified
-pattern
-sixgill_actor
-sixgill_confidence
-sixgill_feedid
-sixgill_feedname
-sixgill_post_virustotallink
-sixgill_postid
-sixgill_posttitle
-sixgill_severity
-sixgill_source
-valid_from
-stix

Disclaimer – As Cybersixgill product consists of publicly available information from the deep and the darkweb, we provide a confidence score, see sixgill_confidence field.

About the Provider: