Infoblox ActiveTrust uses highly accurate machine-readable threat intelligence data via a flexible Infoblox Threat Intelligence Data Exchange (TIDE) to aggregate, curate, and enable distribution of data across a broad range of infrastructure. TIDE enables organizations to ease consumption of threat intelligence from various internal and external sources, and to effectively defend against and quickly respond to cyberthreats. TIDE is backed by the Infoblox threat intelligence team that normalizes and refines highquality threat intelligence data feeds.
Infoblox TIDE has powerful REST API. The API allows to access indicators of compromize in TIDE database in formats like json, xml, stix, cef, cvs etc. This allows easily do integrations with other solutions without additional transformation/mediation layers. SIEM, NGFW, SWG are good examples where the indicators can be applied to improve overall security in an organization.
The attached quick start guide provides you an overview of Infoblox TIDE, Infoblox Dossier and how to access data using API.
Vadim
