Skip to main content


Cyware Threat Intelligence eXchange

Cyware Threat Intelligence eXchange (CTIX) is a smart, client-server threat intelligence platform (TIP) for ingestion, enrichment, analysis, and bi-directional sharing of threat data within your information sharing network. CTIX enables end-to-end tactical and technical threat intelligence automation with advanced analysis in a collaborative and trusted sharing network.

This CTIX content pack contains the CTIX’s - Enrichment Integration that enables direct enrichment of an Indicator of Compromise (IOC) from the CTIX Instance configured by the user. This integration allows users to enrich IP Addresses, URLs Domains, and File Hashes, making the entire enrichment suite of CTIX available for orchestration for detecting and responding to threats.

What does this pack do?

The actions included in this pack enable end-to-end enrichment of threat intelligence indicators (IOCs), allowing a user to orchestrate contextualized enrichments and detections from both XSOAR playbooks and XSOAR CLI.

  • Enrich an Indicator with CTIX’s signature scoring algorithm
  • Contextualize an IP, Domain, URL, or Hash with data correlated from multiple sources configured on CTIX
  • Manage indicators on various devices coming into CTIX, by analyzing if the indicator has been blocked, deprecated, or even whitelisted on one or more environments
  • Creates intel in CTIX platform (Intel Creation is supported for ctix version 2.9.3 and above)

For more information


Cyware Labs


CertificationRead more
Supported ByPartner
CreatedFebruary 17, 2021
Last ReleaseMarch 3, 2022

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.