FAQs Maltiverse Product

a

Should IoCs have expiration?

Category: FAQs Maltiverse Product
Yes. We think IoCs decay must be taken into account, and we deliver a different scoring algorithm for each type of IoC as not all the IoCs are the same in nature. IoCs decay term implies that IoCs go into different stages as they decay of relevance.
a

Do you remove IoCs from your feed?

Category: FAQs Maltiverse Product

No, we never remove them. We have a filed named classification with different thresholds: Malicious, Suspicious, Neutral and Whitelist.

a

Your scoring algorithm is applied only once?

Category: FAQs Maltiverse Product

No. Our scoring algorithm is applied in real time to our IoCs on the database.

a

What does the Community IoCs mean?

Category: FAQs Maltiverse Product

Maltiverse as being open to everyone, customers and no customers can check their IoCs (Hashes, IP addresses, Domains and URLs) again our database, so when a customer uploads information which Maltiverse does not have in its database, we run our scoring algorithm and we classify it and score this new IoC, making these new IoC unique

a

Is your scoring algorithm the same for the different IoCs?

Category: FAQs Maltiverse Product

No, there is a different scoring algorithm for the different hashes, IP addresses, domains and URLs IoCs we work with.

a

Can Maltiverse threat intelligence feed be distributed when my security stack is in production?

Category: FAQs Maltiverse Product

Yes, this is done to ensure that your devices are always updated in real time.

a

Can Maltiverse be installed on-premises?

Category: FAQs Maltiverse Product

No. Maltiverse only offers a SaaS model.

Trial