Threat Intelligence Dashboard
Live IOC metrics from Picket — automated threat intel integration for AWS.
■
9,514
Active IOCs
◆
8
IOC Types
▸
4 / 4
Active Feeds
Last updated just now
IOC Breakdown
Feed Status
Abuse.ch ThreatFox
Active·16,993 IOCs
Abuse.ch Feodo Tracker
Active·5 IOCs
AlienVault OTX
Active·11,672 IOCs
Mallory
Active·18,989 IOCs
How It Works
Ingest
Polls external threat intel feeds (Abuse.ch, AlienVault OTX) every 15 minutes. Parses IOCs from JSON, CSV, and STIX formats.
Normalise
Deduplicates IOCs, validates formats, assigns confidence scores based on source reliability and multi-source corroboration.
Distribute
Pushes IOCs to AWS GuardDuty threat lists and WAF IP sets automatically. Expired IOCs are removed hourly.