horizontal lines

OSINT Threat Feeds

Gigasheet's built in threat intelligence enrichment service offers context for IP data by collecting threat intel from the top open threat feeds every six hours. U-235 is included with Gigasheet at no cost, and requires no setup, no code, configuration, or API token. U-235 can be used to quickly triage massive IP lists by identifying the most egregious threats.

LICENSE: FREE 

INCLUDED DATA TYPES: IP

GEO IP

GEO IP is a built-in GEO IP look-up service. Use GEO IP to add geographic location to any spreadsheet, csv, or log of IP address. GEO IP is included with Gigasheet at no cost, and requires no setup, no code, configuration, or API token. GEO IP can be used to identify the host country and city of any public IP address.

LICENSE: FREE
INCLUDED DATA TYPES: IP

VirusTotal

VirusTotal provides comprehensive intelligence on malware, and critical data for threat hunting. VirusTotal API users can add hash and IP intelligence to any sheet. A paid VirusTotal API key is required. While a free API key will work, it is throttled to provide limited responses. The VirusTotal enrichment requires no configuration or coding.

LICENSE: THIRD-PARTY, API KEY REQUIRED

DATA TYPES: IP, HASH

Recorded Future

Recorded Future provides context for columns of IPs and hashes in Gigasheet. This enrichment requires a Recorded Future API token and the SOAR API. Two columns will be added to your sheet: the Recorded Future Risk Score, and the number of Risk Rules triggered. 

LICENSE: THIRD-PARTY, API KEY REQUIRED
INCLUDED DATA TYPES: IP, HASH

Recorded Future logo

GreyNoise

GreyNoise helps security analysts know "what not to worry about." The Gigasheet integrations helps you clean noisy data from any sheet using the GreyNoise Enterprise API. This enrichment leverages GreyNoise's internet-wide sensor network, but requires no coding, scripting or set up in Gigasheet.

LICENSE: THIRD-PARTY, API KEY REQUIRED

DATA TYPES: IP

Enrichments

One-click context in any sheet