GreyNoise Community

By GreyNoise Intelligence

Query basic IP information such as the owners and its internet scanning activity in the last 90 days.

Infrastructure & Network Information Incident Response Threat Hunting

Introduction
Resources
Contact

GreyNoise Transforms for Maltego

GreyNoise is a cybersecurity platform that collects and analyzes Internet-wide scan and attack traffic. This data is made available through SIEM, SOAR, TIP integrations, command-line tool, bulk data, visualizer, Enterprise API, and community API so users can contextualize existing alerts, filter false positives, identify compromised devices, and track emerging threats.

With the help of Greynoise datasets, analysts can recognize events not worth their attention. Indicators in GreyNoise are likely associated with opportunistic internet scanning or common business services, not targeted threats. This context helps analysts focus on what matters most.

The Community API provides community users with a free tool to query IPs in the GreyNoise dataset and retrieve a subset of the full IP context data returned by the IP Lookup API.

The GreyNoise Community API Transform provides users with the basic insight of an indicator, using a subset of the GreyNoise datasets. It is available for a free trial to users without registration, and with a limited number of lookups per day.

Unlimited access to the Community API is available to all users with their GreyNoise account API key. Register here to get started.

Benefits

Query an IP via the Community API and see basic information about that IP such as the organization name that owns the IP, if the IP has been observed scanning the internet in the last 90 days etc.
Gain a comprehensive perspective of investigations by pivoting across other disparate data sources available on the Transform Hub, all in one single UI

Typical users

Incident response
Threat Intelligence
CERT
Cyber and Digital Forensics

Resources

Articles

Automate Investigations with Maltego Machines – Part 2: Our New Cybersec & SOCMINT Machines

Contact

Reach out to us to learn more about this data integration and how to access it.

First Name*

Last Name*

COMPANY EMAIL*

Country*

Organization Name *

Organization size *

Business role *

Industry type *

Are you an active Maltego user? *

Reason for contacting *

Focus of Your Business Unit *

Main Use Cases *

Message *

Please provide us details on the Transforms you are interested in.

By clicking on "Send Message", you agree to the processing of the data you entered and you allow us to contact you for the purpose selected in the form. For further information, see our Data Privacy Policy.

I would like to receive updates about Maltego product updates, news, events and offers.

About GreyNoise Intelligence

GreyNoise helps security analysts save time by revealing which events they can ignore. We do this by curating data on IPs that saturate security tools with noise. This unique perspective helps analysts confidently ignore irrelevant or harmless activity, creating more time to uncover and investigate true threats. This data is delivered through our SIEM, SOAR, and TIP integrations, API, command-line tool, bulk data, and visualizer.

For more information, visit https://greynoise.io/.

Pick the right product and get started.

Choose your solution