AXIS Intelligence Feeds:  Telemetry collected from attacker infrastructure

INTELLIGENCE

Our flagship offering, AXIS INTELLIGENCE: GLOBAL, is an aggregate of our Industry, Geographic, and Threat feeds that refresh every 24 hours. We have confirmed victim Evidence of Compromise or EOCs. That’s 100% signal and 0% noise.

FORMAT & PROTOCOL

AXIS INTELLIGENCE feeds are available in JSON format. Use SFTP to securely access and ingest our feeds from AWS S3 buckets.

24HRS

These data feeds refresh daily.

FIELDS INCLUDED IN ALL FEEDS

VICTIM

  • IP Address
  • Organization Name

THREAT

  • Malware Family
  • Campaign
  • Threat Actor
  • Connection Type
  • Beacon Counts

INDUSTRY

  • NAICS Sector
  • NAICS Subsector
  • NAICS Code
  • ISIC Code
  • ASN

GEO

  • Country
  • City
  • State
  • Region
  • Country Code
  • Latitude
  • Longitude

If you’re only interested in activity for specific Malware Families then these feeds are for you.

Maybe you need Geo specific intelligence on one or more regions? Pick from one of many feeds available for any country in the world.

Choose from dozens of NAICS industry feeds for information relative to that industry.

USE CASES

> Get ahead of Ransomware

> Find Cyber Contagion Sources

> Efficiently highlight and confirm suspicious IOCs

> Enhance and accelerate MDR and IR

> Remove costly, bloated and inaccurate data feeds