OpenCTI is an open-source platform designed to help organizations manage their cyber threat intelligence and observables. It enables cybersecurity teams to organize, store, and operationalize threat information across technical, operational, and strategic levels.
OpenCTI Add-On for Splunk enables Splunk users to interconnect Splunk With OpenCTI and to leverage threat information to improve detection capabilities and response to security incidents.