Threat Intelligence Dashboard

Live IOC metrics from Picket — automated threat intel integration for AWS.

9,542

Active IOCs

8

IOC Types

4 / 4

Active Feeds

Last updated just now

IOC Breakdown

ipv41,814
domain1,778
url1,563
md51,561
sha11,446
sha2561,360
ipv619
cidr1

Feed Status

Abuse.ch ThreatFox

Active·21,948 IOCs

Abuse.ch Feodo Tracker

Active·5 IOCs

AlienVault OTX

Active·6,866 IOCs

Mallory

Active·18,093 IOCs

How It Works

Ingest

Polls external threat intel feeds (Abuse.ch, AlienVault OTX) once daily. Parses IOCs from JSON, CSV, and STIX formats.

Normalise

Deduplicates IOCs, validates formats, assigns confidence scores based on source reliability and multi-source corroboration.

Distribute

Pushes IOCs to AWS GuardDuty threat lists and WAF IP sets automatically. Expired IOCs are removed hourly.