Infoblox Threat Intelligence Data Exchange (TIDE)

Infoblox Threat Intelligence Data Exchange (TIDE) is a platform for managing, consolidating, and distributing threat data from multiple sources, including commercial, open source, and private sources. TIDE enables the creation of custom feeds and their distribution to security systems such as SIEM, SOAR, and NGFW. The platform offers access to the proprietary Infoblox Cyber Intelligence Unit (CIU) feed, which provides high-quality IOC (Indicators of Compromise) data, including malicious domains, IP addresses, ASNs, and WHOIS records. As part of DNS Threat Intelligence, users have access to feeds that classify domains by reputation, threat type, and source of infection. Integration with BloxOne Threat Defense enables automatic enforcement of security policies at the DNS level and early detection of malware, command and control, and DGA (Domain Generation Algorithm) activity. Infoblox supports the STIX/TAXII standard for data exchange and provides integration with TIP (Threat Intelligence Platform) solutions, facilitating the automation of analytical processes. Thanks to its cloud architecture, Threat Intelligence data is constantly updated and available in real time.