Get Even Better Data Awareness & Recall with the Updated Polarity-ThreatQuotient Integration

Product Jun 17, 2020

Today’s post continues an ongoing series on Polarity Integrations. Data tells a story, Polarity helps you see it with Augmented Reality overlaying contextual information from the applications you use every day, no glasses or goggles required. With over 100 powerful integrations, Polarity’s open-source Integrations Library arms you with the right data at the right time to make informed decisions and take action with speed. This example showcases our integration with ThreatQuotient.

The Polarity-ThreatQuotient integration brings threat analysts the power of Augmented Reality for ThreatQuotient’s robust threat intelligence data. The integration, which was built in 2018, has undergone some recent updates and improvements, arming threat analysts with even better data awareness and recall.

What is ThreatQ?

ThreatQ is a threat intelligence platform designed to accelerate security operations through context, prioritization, and automation. ThreatQ's Threat Library, Adaptive Workbench, and Open Exchange help operators, analysts, and executives to accelerate detection and response, make better decisions and collaborate amongst various teams.

Updated ThreatQ Integration:

Polarity’s integration with ThreatQuotient has undergone recent updates in response to community feedback and product releases. We’re excited to announce that the new integration allows users to:

  • view Indicator details including type, status, class, sources, attributes, tags, description, related adversaries, and comments
  • enable adding and removing tags
  • enable updating Indicator Status and Score
  • view/add/edit comments

The new capabilities allow analysts to very easily triage threat intelligence and take the necessary actions to share information about what is occurring or update the indicator to appropriately reflect its status.

See the Polarity-ThreatQuotient Integration in Action

In this image, notice an IP is highlighted in the spreadsheet on the left. On the right, you can see that Polarity's computer vision recognized the text on screen, and in real-time while the analyst is working, it has provided contextual information for the highlighted IP in the Overlay Window. This contextual information has been pulled from ThreatQuotient through the Polarity-ThreatQuotient Integration.

What Next?

See for yourself with a Polarity demo or trial, or a ThreatQuotient demo. To learn more, take the Tour or tune into our next Community Tech Tuesday.

Integrate with Polarity

Data tells a story, Polarity helps you see it with Augmented Reality. With more than 100 integrations, Polarity works well with the products our customers use every day. Connect your product to Polarity through our open-source integration program.