Threat Intelligence Dashboard
Live IOC metrics from Picket — automated threat intel integration for AWS.
■
0
Active IOCs
◆
0
IOC Types
▸
0 / 0
Active Feeds
Feed Status
No feed data available yet. Feeds poll every 15 minutes.
How It Works
Ingest
Polls external threat intel feeds (Abuse.ch, AlienVault OTX) every 15 minutes. Parses IOCs from JSON, CSV, and STIX formats.
Normalise
Deduplicates IOCs, validates formats, assigns confidence scores based on source reliability and multi-source corroboration.
Distribute
Pushes IOCs to AWS GuardDuty threat lists and WAF IP sets automatically. Expired IOCs are removed hourly.