Learn. Share. Secure. Access product knowledge, get certified, and collaborate with the global Securonix user community.
Join the discussion, ask questions, get solutions.
Discover product guides and helpful how-tos.
Join groups and collaborate with peers.
Stay up to date with our product team.
Share your ideas and suggestions with our team.
Discover and join upcoming events.
Explore Securonix solutions, products, and company insights
Access product guides, release notes, and technical documentation
Discover the ThreatQ threat intelligence platform and solutions
Find step-by-step guides, release notes, and troubleshooting resources
Discover and deploy integrations, extensions, and apps for the ThreatQ platform
Analyzing PHALT#BLYX: How Fake BSODs and Trusted Build Tools Are Used to Construct a Malware InfectionBy Securonix Threat Research: Shikha Sangwan, Akshay Gaikwad, Aaron BeardsleeJanuary 5, 2025 tldr:Securonix threat researchers have been tracking a
Coming Soon: AI in the SOC Learning PathA new learning journey is launching soon on the Securonix Community—built to help analysts, threat hunters, and security leaders develop practical AI skills for the modern SOC.Security operations are evolving r
Greetings Securonix Connect Members,We are pleased to share the December 2025 Autonomous Threat Sweeper (ATS) Monthly Digest.During December, ATS tracked 141 emerging threats identified in the wild and performed corresponding sweeps across customer e
Audience: SOC Analysts, Threat Intelligence Analysts, Security Operations LeadersProduct Module:Threat Intelligence Management (ThreatQ Platform)Last Updated: December 18, 2025KB ID: KB‑20251218‑ThreatQ‑Scoring‑ExpirationTags: Threat Intelligence, L
Grouping in Securonix is a two-fold process: Create Data Sources (DS) correctly — Syslog and API logs must be separated into their own DS so that grouping is clean and meaningful. Use functionality and Spotter searches — Once DS are created proper
During an undetermined number of executions of my playbook, it crashes. Is there a way to validate how many executions have been performed and whether they are causing instability in my service?
🧠 OverviewWe’re thrilled to announce the release of the VMRay Action for the ThreatQuotient TDR Orchestrator!This new integration allows you to submit URL-based data collections directly to the VMRay Malware Analysis Platform for dynamic analysis an
ProblemSecurity teams often need to push indicators of compromise (IOCs) into DNS-layer security solutions like Infoblox Threat Defense. Without automation, uploading and maintaining threat lists becomes manual, slow, and error-prone — limiting an or
ProblemSecurity teams often manage threat intelligence in ThreatQuotient while handling incident response and remediation in ServiceNow — this can create silos, manual hand-offs, and delays in triage and response.ObjectiveThis article explains how th
ProblemSecurity teams often lack unified visibility across external threats, leaked credentials, asset exposures, and vulnerability intelligence. Without automated ingestion, correlating SOCRadar findings with ThreatQuotient data becomes manual and i
When a feed fails—or while developing a new feed—users often download Feed Run files to troubleshoot and understand what went wrong.Currently, these files are automatically zipped and password protected. This design helps prevent the files from being
Already have an account? Login
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.
