What is Google Threat Intelligence?
Google Threat Intelligence is a cyber threat intelligence platform that combines three powerful sources: Mandiant’s frontline intelligence, VirusTotal’s community data, and Google’s own security telemetry. This combination provides one of the most comprehensive views of the current threat landscape.
The platform enables security teams to detect, understand, and respond to threats faster. Through AI-powered analysis and curated intelligence feeds, analysts receive context-rich information about attackers, malware, and vulnerabilities.
Core Features
- Mandiant Intelligence: Insights from over 1,100 annual incident response engagements
- VirusTotal integration: Access to over 80 million malware samples and community ratings
- Google telemetry: Insights from protecting billions of users and devices
- AI-powered analysis: Automatic correlation and prioritization of threat indicators
Typical Use Cases
Proactive Threat Hunting
Security teams use Google Threat Intelligence to proactively search for Indicators of Compromise (IoCs) in their environment and detect threats before damage occurs.
Incident Response Support
During security incidents, the platform immediately provides context about attackers, their tactics, and malware used, significantly reducing response time.
Benefits
- Three unique intelligence sources in one platform
- Context-rich information instead of isolated indicators
- AI-powered prioritization reduces analysis effort
- Seamless integration with Chronicle and other SIEM systems
Integration with innFactory
As a Google Cloud Partner, innFactory supports you with Google Threat Intelligence: evaluation, integration into your security infrastructure, workflow automation, and analyst training.
Typical Use Cases
Frequently Asked Questions
What is Google Threat Intelligence?
Google Threat Intelligence is a comprehensive threat intelligence platform that combines insights from Mandiant analysts, VirusTotal community data, and Google's own security telemetry.
How does Google Threat Intelligence differ from other feeds?
The solution combines three unique sources: Mandiant's frontline intelligence from incident response engagements, VirusTotal with over 80 million samples, and Google's telemetry from billions of devices.
Can I integrate Google Threat Intelligence into my SIEM?
Yes, the platform integrates with common SIEM systems via APIs and native integrations, including Chronicle, Splunk, and others.
