Feed Status

External threat intelligence sources that Picket polls for IOCs.

Last updated just now

Abuse.ch ThreatFox

Active·21,948 IOCs

Community-driven IOC sharing platform. Collects malware-related IOCs including IPs, domains, URLs, and file hashes.

IOC types:IPv4DomainURLMD5SHA256
Source:https://threatfox.abuse.ch

Abuse.ch Feodo Tracker

Active·5 IOCs

Tracks botnet C2 infrastructure. Focuses on Dridex, Emotet, TrickBot, QakBot, and BazarLoader.

IOC types:IPv4
Source:https://feodotracker.abuse.ch

AlienVault OTX

Active·6,866 IOCs

Open threat intelligence community. Aggregates pulses from security researchers worldwide.

IOC types:IPv4IPv6CIDRDomainURLMD5SHA1SHA256
Source:https://otx.alienvault.com

Mallory

Active·18,093 IOCs

AI-native threat intelligence platform. Aggregates observables from thousands of sources with verdict scoring and contextual enrichment.

IOC types:IPv4IPv6DomainURLMD5SHA1SHA256
Source:https://app.mallory.ai

IOC Routing

Picket routes IOCs to different AWS security services based on type.

IOC TypeGuardDutyWAFNetwork FirewallSecurity Hub
IPv4 / CIDRThreat listIP setPlanned—
IPv6 / CIDRThreat listIP setPlanned—
DomainThreat list—Planned—
URL——PlannedASFF findings
MD5 / SHA1 / SHA256———ASFF findings