Avira’s Threat Intelligence Feeds provide comprehensive, clear and simple to consume intelligence that has a high degree of relevance to security vendors and service providers.
Avira’s File Reputation Feed contains the key attributes to enable the identification of clean and malware files.
The File Reputation Feed includes reputation data developed on Windows files, Android, binaries and documents. It is delivered every 60 seconds with a delay of no more than 300 seconds ensuring your intelligence is never out of date, and always valid.
File information includes
Hashes, time stamps, file size, and formats.
Easy to consume
Data is delivered in an easy-to-consume JSON format.
Secure and reliable
Hosted in a secure Amazon S3 service.
Easy integration
Does not require implementation of special code or infrastructure (SDK or API).
File information
Includes the basic data on hashes, timestamps, size, and formats.
Classification intelligence
Identifies the malware and its function.
Static intelligence
Includes the attributes of related certificates, and the association of the file with particular exploits.
Dynamic intelligence
Provides the details of the impact on the file system, registry, network and API calls, injections, and mutexes.
Infection intelligence
Delivers intelligence associated with the attack vectors and procedures used.
Operational intelligence
Developed to provide details on the prevalence and source, and a summary of tactics and procedures.
Avira’s File Intelligence Feed contains extensive, detailed, and highly actionable intelligence developed by the Avira Protection Cloud.
The File Intelligence Feed includes intelligence developed on Windows and Android files, and is delivered every 60 seconds with a delay of no more than 300 seconds helping to ensure your intelligence is always valid.
URL information including
Original URL, hashes, timestamps and classification.
Easy to consume
Data is delivered in an easy-to- consume JSON format.
Secure and reliable
Hosted in a secure Amazon S3 service.
Easy integration
Does not require implementation of special code or infrastructure (SDK or API).
Reputation data includes
URL security categories and Phishing.
Avira’s Web Reputation Feed contains the key attributes to help enable the identification of domains and URLs that contain malicious or potentially malicious content.
The Web Reputation Feed includes reputation data developed on the URL, including hashes, original URL timestamps, and the classification. It is delivered every 60 seconds with a delay of no more than 300 seconds helping to ensure your intelligence always valid.
On-demand threat intelligence
Benefit from Avira’s threat intelligence database developed on the basis of three decades of malware analysis.
Delivered in real-time
Powerful hash evaluation technology and a database of over a billion entries provide immediate comparison with known threats.
Personalized threat intelligence
Option to upload all, or specific file types, and receive the analysis results (malware or clean) within seconds.
Platform agnostic
Accessed using a REST API, architected for both premise-to-cloud and cloud-to-cloud integration.
Secure and reliable
Delivered from the cloud, it’s highly available, reliable, and scalable.
Direct or cloud-to-cloud access
Flexible implementation makes it quick and easy to get started.
The File Reputation API provides simple, on-demand access to Avira's threat intelligence. It enables technology partners to submit a file hash for evaluation or upload a file to the Avira Protection Cloud for analysis.
Hash inquiries are evaluated, and a result returned within tens of milliseconds. If the hash is unrecognized, the suspicious file can be sent to the Avira Protection Cloud for full analysis.
Avira’s Web Reputation API offers a real-time, site-specific query approach to identifying malicious URLs and inappropriate internet sites. Delivered as part of Avira’s portfolio of threat intelligence solutions, the API provides an on-demand, usage-based alternative to a threat intelligence feed of web reputation data. It is an ideal solution for Security as a Service applications, firewalls, routers, email and web traffic scanning as well as internet content filtering.
Threat classifications provides information on whether a site or domain is blacklisted, contains PUAs, or is safe and clean. Content categorization delivers real-time information on the domain compliant with IAB-1, tier 1 and 2.
Threat classification
Includes safe, malware, spam, PUA, phishing and more.
Content categorization
400 categories compliant with IAB-1, tier 1 and tier 2.
Platform agnostic
Accessed using a REST API, architected for both premise-to-cloud and cloud-to-cloud integration.
Real-time response
Typically within 10ms.
Threat intelligence reports
The Cloud Sandbox API will deliver an unparalleled level of detail in terms of malware analysis and intelligence.
Highly scalable
Scale malware analysis without impacting internal systems or
having to purchase additional hardware.
On-demand
On-demand malware analysis service via a REST API.
Platform agnostic
No local infrastructure, easy to integrate.
The Avira Cloud Sandbox API enables security vendors and service providers to submit files and receive detailed threat intelligence reports containing a complete threat assessment.
It is the security industry's most powerful and scalable malware analysis service. The Avira Cloud Sandbox utilizes the most advanced file analysis, deep inspection and award-winning dynamic detonation technologies to develop detailed threat intelligence.
Enhance your own threat intelligence with Avira's unique, comprehensive, and easy-to-consume cyber-threat feeds. Contact your local integration team now:
Contact us