Skip to content

OpenCTI Documentation Space

Welcome to the OpenCTI Documentation space. Here you will be able to find all documents, meeting notes and presentations about the platform.

Release notes

Please, be sure to also take a look at the OpenCTI releases notes, they may contain important information about releases and deployments.

Introduction

OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. It has been created in order to structure, store, organize and visualize technical and non-technical information about cyber threats.

Getting started

  • Deployment & Setup

    Learn how to deploy and configure the platform as well as launch connectors to get the first data in OpenCTI.

    Deploy now

  • User Guide

    Understand how to use the platform, explore the knowledge, import and export information, create dashboard, etc.

    Explore

  • Administration

    Know how to administrate OpenCTI, create users and groups using RBAC / segregation, put retention policies and custom taxonomies.

    Customize

Need more help?

We are doing our best to keep this documentation complete, accurate and up to date.

If you still have questions or you find something which is not sufficiently explained, join the Filigran Community on Slack.

Latest blog posts

All tutorials are published directly on the Medium blog, this section provides a comprehensive list of the most important ones.

  • Introducing malware analysis: enhance your cybersecurity triage with OpenCTI
    Jul 22, 2023

    As a cybersecurity analyst, you understand the importance of quickly identifying and analyzing suspicious or malicious files, URLs, and network traffic...

    Read

  • OpenCTI case management is ready for takeoff: what is available and what’s next
    Jul 3, 2023

    As part of our 2023 strategic roadmap, we’ve worked since January on the case management system within the OpenCTI platform. This initiative comes from 2 simple statements...

    Read

  • Progressive rollout of the OpenCTI Enterprise Edition: why, what and how?
    June 10, 2023

    We are thrilled to announce that, from OpenCTI 5.8, Filigran is now providing some customers with an Enterprise Edition of the platform, whether on-premise...

    Read

Additional resources

Below, you will find external resources which may be useful along your OpenCTI journey.

OpenCTI Ecosystem
List of available connectors and integrations to expand platform usage.

Training Courses
Training courses for analysts and administrators in the Filigran training center.

Performances tests & metrics
Regular performance tests based on default configuration and datasets.