Question 1

What is ThreatCortex?

Accepted Answer

ThreatCortex is an AI native threat intelligence platform that transforms raw threat data into prioritized, actionable intelligence automatically.

Question 2

Who is ThreatCortex built for?

Accepted Answer

ThreatCortex is built for CTI analysts, SOC teams, MSSPs, and security leaders who need signal, not noise.

Question 3

What does ThreatCortex automate?

Accepted Answer

ThreatCortex automates IOC enrichment, STIX and TAXII workflows, threat actor attribution, and Priority Intelligence Requirement (PIR) based prioritization.

Question 4

What tools does ThreatCortex include?

Accepted Answer

ThreatCortex includes BaitBox (phishing URL detonation and analysis), narfAI (AI research partner with multi-agent reasoning), Proactive Threat Hunt (automated web search driven by PIRs), Skills and loadouts, PIR and Intel prioritization, Investigations (case management), Detection Rules (AI-generated Sigma/YARA/Snort), Research and Knowledge Base, OSINT research, and a REST API for automation.

Question 5

What is narfAI?

Accepted Answer

narfAI is the AI research partner built into ThreatCortex. It reasons over your threat repository, correlates TTPs, and answers questions with full citations.

Question 6

What is Proactive Threat Hunt?

Accepted Answer

Proactive Threat Hunt is an automated search worker that runs on a configurable schedule, generating queries from your PIRs and watchlists to discover emerging threats beyond your RSS feeds. It deduplicates against existing intel and ingests new findings directly into your processing pipeline.

Question 7

What is BaitBox?

Accepted Answer

BaitBox is a sandboxed URL detonation tool. Submit a suspicious URL and get a full forensic breakdown including screenshots, redirect chains, SSL inspection, HTTP headers, OSINT enrichment, and an AI-powered phishing analysis.