Edgewatch Threat Intelligence Feeds

Description

Edgewatch's Direct Data Collections provide organizations with authentic, unfiltered insights into the cyber threat landscape by utilizing firsthand, non-pre-processed data. Leveraging proprietary data collection and analysis methodologies, Edgewatch ensures unbiased, high-quality threat intelligence without reliance on third-party sources. This approach guarantees data sovereignty within Europe and provides a comprehensive, global perspective on potential threats. This ensures accuracy and real-time awareness, enabling swift and effective responses to emerging threats.

Main Datasets Available:

• Edgewatch Explorer Datasets: Comprehensive and regularly updated information on publicly accessible devices and services, including detailed service configurations, running services, and protocol handshake data from global IPv4 and IPv6 addresses. This dataset also provides a historical view of these resources.
• Edgewatch Insight Datasets: Data from internet-wide scans and attacks, specifically targeting background internet noise. This includes untargeted scans, random attacks, and general traffic patterns, with a focus on distinguishing genuine threats from non-essential noise. This dataset is essential for minimizing false positives, identifying compromised systems, and enhancing the understanding of network activities and security events.
• CVE Fixes API: Automatically curated dataset derived from Common Vulnerabilities and Exposures (CVE), offering detailed information on vulnerabilities, including descriptions, severity levels, potential impacts, and available fixes or patches. This aids in proactive cybersecurity measures and risk mitigation strategies.
• DNS & TLS API: Comprehensive data on internet-wide Domain Name configurations and SSL/TLS certificates. This API provides historical and current DNS records and SSL/TLS certificate information, critical for cybersecurity analysis, digital forensics, and research.