Turning Indicators into Intelligence in OpenCTI with Criminal IP

This announcement explains the Criminal IP integration with OpenCTI: ingested IPs, domains, and URLs are automatically enriched with dual-perspective reputation scores, infrastructure/context (ASNs, geolocation, CVEs), behavioral signals, and phishing analysis, and the results are represented as structured entities and relationships in the OpenCTI knowledge graph to support SOC triage, threat hunting, and phishing/campaign analysis.