OpenCTI-Platform/opencti

Summary (KO)

OpenCTI는 사이버 위협 인텔리전스를 관리하고 시각화하는 오픈소스 플랫폼입니다. STIX2 표준을 기반으로 위협 정보를 구조화하고 저장하며, MISP, TheHive, MITRE ATT&CK 등 다른 보안 도구들과 통합할 수 있습니다.

Summary (EN)

OpenCTI is an open-source platform for managing and visualizing cyber threat intelligence knowledge and observables. It structures data using STIX2 standards and integrates with security tools like MISP, TheHive, and MITRE ATT&CK to help organizations analyze and understand cyber threats.

Tech Stack

Highlights

• STIX2 standard compliance
• GraphQL API with modern web interface
• Extensive connector ecosystem
• MITRE ATT&CK framework integration
• Enterprise and Community editions
• Data import/export capabilities

Use Cases

• Cyber threat intelligence management
• Security data analysis and visualization
• Threat hunting and investigation
• Security team collaboration
• IOC and TTPs tracking

Similar Projects