Products

From MilcordWiki

Milcord develops software as a service for asymmetric and cyber threat intelligence, and socio-cultural modeling. Botnet Threat Intelligence is one of the leading knowledge bases for botnet threats worldwide.

Botnet Threat Intelligence

ISPs, government agencies, enterprises, and universities can bring early warning intelligence by integrating Botnet Threat Intelligence into their information security systems using the available API. Information Sharing and Analysis Centers (ISACs) can automatically analyze the common suspicious entities reported by its members and disseminate the results for increased security protection. Threat intelligence companies can triage malware analysis using domain guilt by association.
learn more ...
demo
purchase ...

Botnet Threat Intelligence is a real-time threat intelligence information service about the ecosystem used in phishing scams, spam campaigns, malware delivery, and Distributed Denial of Service attacks. The Botnet Threat Intelligence Knowledge Base contains current and historical intelligence on more than 1.5 million suspicious entities such as domain names, nameservers, and IP addresses. The knowledge base contains not only the facts about the individual domain and IP address namespace entities but also the relationship among the malicious entities. Our service continuously monitors open source malicious data feeds, detects botnets in real-time and scores the guilt of entities by their behavior, and the malicious intent of entities using guilt by association.

What makes Botnet Threat Intelligence different?

• Real-time: Botnet Threat Intelligence detects botnets used for malware delivery, phishing attacks, spam campaigns in near real-time within minutes. It enables your organization to avoid most the damage done before detection.
• Reputation scores: Botnet Threat Intelligence is not an aggregation of malicious data feeds. Botnet Threat Intelligence actively monitors the domains in these malicious data feeds, computes the guilty scores based on various indicators and cross correlates the results with passive DNS monitoring.
• Guilt by association: Botnet Threat Intelligence provides intelligence not only about the individual entities but also the historical relationships between the malicious entities. Ecosystem entities reused by the adversary are instantly analyzed for in depth threat understanding.
• Early warning: Botnet Threat Intelligence provides early warning about entities using the guilt by association knowledge. Botnet Threat Intelligence derives the evidence from the ecosystem social network.
• Evidence based: Botnet Threat Intelligence reputation scores are based either on the malicious behavior of a monitored entity, or its relationship with other malicious entities. The evidence can be reviewed by the analyst, or programmatically integrated into IS applications through the available API.