Pulsedive

Pulsedive allows users to search any domain, Internet Protocol (IP) address, or Uniform Resource Locator (URL) and enrich it on demand through passive and active scans. This feature delivers in-depth context, such as DNS, WHOIS, and SSL data, helping users validate potential threats and strengthen their investigations.

The platform enables users to investigate threats within its database, providing up-to-date context with linked indicators, tactics, techniques, and procedures (TTPs), and references from MITRE ATT&CK. This feature helps analysts correlate activity patterns, identify emerging risks, and improve strategic threat awareness.

Users can extract both fanged and defanged indicators from text and enrich them in bulk. The feature supports exporting results in multiple formats, simplifying the process of managing large datasets while ensuring complete and accurate threat of visibility across multiple indicators.

Pulsedive features an explore query language that allows users to search across extensive threat datasets with boolean logic and wildcards. It supports filtering by attributes such as threat name, alias, category, risk level, and data feed. This enables users to uncover relationships, visualize attack patterns, and perform targeted investigations.

This feature streamlines Cyber Threat Intelligence (CTI) ingestion through bulk exports of indicators in Comma-Separated Values (CSV) or Structured Threat Information Expression/Trusted Automated Exchange of Indicator Information (STIX/TAXII) 2.1 formats. Users can filter exports by timestamp, risk score, or category, allowing seamless integration into existing security systems for faster and more efficient data analysis.