Skill UI

A comprehensive guide to building an automated Indicator of Compromise (IOC) enrichment pipeline using OpenCTI. This skill teaches how to leverage OpenCTI's native STIX 2.1 model and internal connectors to pull deep context from major external threat intelligence sources like VirusTotal, Shodan, AbuseIPDB, and GreyNoise. The pipeline automatically enriches newly ingested indicators, correlates them with known threat actors and campaigns, and generates confidence scores for rapid analyst prioritization.