SOCrates

About

SOCrates enhances any indicator of compromise by aggregating data from numerous threat intelligence platforms in a single request. Input an IP address, domain, URL, or file hash to immediately receive: enrichment results from VirusTotal, Shodan, AbuseIPDB, OTX AlienVault, and URLScan.io; an AI driven triage assessment of Malicious, Suspicious, or Likely Benign, accompanied by a confidence score; integrated analysis that explains the collective meaning of the data across sources; mapping to the MITRE ATT&CK framework with associated technique IDs; and suggested next actions for security analysts.