image

Certego has always been strongly involved and participating in open source projects.

For this reason, we created the IntelOwl project at the start of 2020 (see the blog post). At that moment we did know that the cyber security community really struggled in automating common and daily routine tasks. IntelOwl aimed at filling that gap.

We succeeded. We had strong feedback from the community: we reached almost 3k stars in Github and more and more people tried to participate in the project.

As Certego, we have been leveraging IntelOwl internally to facilitate and speed up the gathering of Threat Intelligence data. It is a tool that we can’t live without anymore.

For this reason we started to think and to focus about the future of the project: we want to make IntelOwl a complete Threat Intelligence Platform that people can use to perform security-related investigations of any kind.

Last year we reached the first step of this process: with IntelOwl v4 we released a fresh new revamped Graphical User Interface!

Today we are proud to announce a new major release: v5!

We heard the community feedback! During the event at Fosdem we announced that we were working in adding an aggregated and simplified visualization of analyzer results. We created it. Now, by leveraging a new plugin type called Visualizers, you will be able to create custom visualizations, based on your specific use cases!

This framework is extremely powerful and allows every user to customize the GUI as they wish. But you know...with great power comes great responsability. To fully leverage this framework, you would need to put some effort in place. You would need to understand which data is useful for you and then write few code lines that would create your own GUI.

That would speed the analysis of the results a lot if done correctly!

We strongly suggest you check all the details regarding this new release in the official Changelog and to try the new application by yourself!

Moreover this release anticipates other important crucial steps for IntelOwl:

As mentioned earlier, this is just another step of a long-term plan. We planned to add to the project some new exciting features that would transform it into a fully fledged Investigation platform that everyone working in cyber security could use for his own goal. If you want to be updated on everything that we are doing and participate in the discussions about the future of the platform, don’t forget that the project is public and everyone is welcome to the community around it! You can follow the project in Github here and to try the new application by yourself!

Thanks for reading and happy hunting!

 Matteo Lodi, Threat Intel Team Leader

Subscribe

Sign up to our newsletter

Clicking Submit, I agree to the use of my personal data in accordance with Certego Privacy Policy. Certego will not sell, trade, lease, or rent your personal data to third parties.