OpenCTI Documentation Space
Welcome to the OpenCTI Documentation space. Here you will be able to find all documents, meeting notes and presentations about the platform.
Please, be sure to also take a look at the OpenCTI releases notes, they may contain important information about releases and deployments.
OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. It has been created in order to structure, store, organize and visualize technical and non-technical information about cyber threats.
Deployment & Setup
Learn how to deploy and configure the platform as well as launch connectors to get the first data in OpenCTI.
Understand how to use the platform, explore the knowledge, import and export information, create dashboard, etc.
Know how to administrate OpenCTI, create users and groups using RBAC / segregation, put retention policies and custom taxonomies.
Need more help?
We are doing our best to keep this documentation complete, accurate and up to date.
If you still have questions or you find something which is not sufficiently explained, join the Filigran Community on Slack.
Latest blog posts
All tutorials are published directly on the Medium blog, this section provides a comprehensive list of the most important ones.
Introducing malware analysis: enhance your cybersecurity triage with OpenCTI
Jul 22, 2023
As a cybersecurity analyst, you understand the importance of quickly identifying and analyzing suspicious or malicious files, URLs, and network traffic...
OpenCTI case management is ready for takeoff: what is available and what’s next
Jul 3, 2023
As part of our 2023 strategic roadmap, we’ve worked since January on the case management system within the OpenCTI platform. This initiative comes from 2 simple statements...
Progressive rollout of the OpenCTI Enterprise Edition: why, what and how?
June 10, 2023
We are thrilled to announce that, from OpenCTI 5.8, Filigran is now providing some customers with an Enterprise Edition of the platform, whether on-premise...
Below, you will find external resources which may be useful along your OpenCTI journey.
List of available connectors and integrations to expand platform usage.
Training courses for analysts and administrators in the Filigran training center.
Performances tests & metrics
Regular performance tests based on default configuration and datasets.