Threat intelligence system and method

1. A computer-implemented method, executed on a computing device, comprising:

associating a unique identifier with an entity;

intercepting network traffic directed toward the unique identifier via a router deployed inside of a network operated by the entity;

routing, via the router, the network traffic out of the network operated by the entity to a private honeypot computing device deployed outside of the network operated by the entity, wherein the private honeypot computing device is associated with the entity; gathering information on a type of attack utilized against the private honeypot;

importing the gathered information by a Security Information and Event Management (SIEM) platform;

processing the gathered information to effectuate generating a plurality of raw threat data definitions associated with the gathered information from the private honey pot;

importing raw threat data from a plurality of threat data sources;

storing the raw threat data definitions associated with the gathered information from the private honey pot and raw threat data from the plurality of threat data sources into one or more database tables to provide a plurality of stored raw threat data definitions; and

processing the plurality of stored raw threat data definitions to be provided to one or more client devices, the processing the plurality of stored raw threat data definitions including one or more of:

deduplicating the plurality of raw threat data definitions;

converting the plurality of raw threat data definitions into a common format; and

determining an age level for each of the plurality of raw threat data definitions.

2. The computer-implemented method of claim 1 wherein the entity includes one or more of:

a company;

an organization;

a corporation; and

an individual.

3. The computer-implemented method of claim 1 wherein the unique identifier is a DNS address.

4. The computer-implemented method of claim 1 wherein the unique identifier is an IP address.

5. The computer-implemented method of claim 1 wherein the private honeypot computing device is a remote computing device.

6. The computer-implemented method of claim 1 , wherein processing the plurality of raw threat data definitions includes forming a master threat data definition.

7. The computer-implemented method of claim 6 wherein the master threat data definition is formed by combining the plurality of processed raw threat data definitions to form a single comprehensive master list.

8. The computer-implemented method of claim 1 wherein processing the plurality of raw threat data definitions associated with the gathered information includes

determining a category for each of one or more pieces of data included within the plurality of raw threat data definitions.

9. A computer program product residing on a non-transitory computer readable medium having a plurality of instructions stored thereon which, when executed by a processor, cause the processor to perform operations comprising:

associating a unique identifier with an entity;

intercepting network traffic directed toward the unique identifier via a router deployed inside of a network operated by the entity;

routing, via the router, the network traffic out of the network operated by the entity to a private honeypot computing device deployed outside of the network operated by the entity, wherein the private honeypot computing device is associated with the entity;

gathering information on a type of attack utilized against the private honeypot;

importing the gathered information by a Security Information and Event Management (SIEM) platform;

processing the gathered information to effectuate generating a plurality of raw threat data definitions associated with the gathered information from the private honey pot;

importing raw threat data from a plurality of threat data sources;

storing the raw threat data definitions associated with the gathered information from the private honey pot and raw threat data from the plurality of threat data sources into one or more database tables to provide a plurality of stored raw threat data definitions; and

processing the plurality of stored raw threat data definitions to be provided to one or more client devices, the processing the plurality of stored raw threat data definitions including one or more of:

deduplicating the plurality of raw threat data definitions;

converting the plurality of raw threat data definitions into a common format; and

determining an age level for each of the plurality of raw threat data definitions.

10. The computer program product of claim 9 wherein the entity includes one or more of:

a company;

an organization;

a corporation; and

an individual.

11. The computer program product of claim 9 wherein the unique identifier is a DNS address.

12. The computer program product of claim 9 wherein the unique identifier is an IP address.

13. The computer program product of claim 9 wherein the private honeypot computing device is a remote computing device.

14. The computer program product of claim 9 , wherein processing the plurality of raw threat data definitions includes forming a master threat data definition.

15. A computing system including a processor and memory configured to perform operations comprising:

associating a unique identifier with an entity;

intercepting network traffic directed toward the unique identifier via a router deployed inside of a network operated by the entity;

routing, via the router, the network traffic out of the network operated by the entity to a private honeypot computing device deployed outside of the network operated by the entity, wherein the private honeypot computing device is associated with the entity;

gathering information on a type of attack utilized against the private honeypot;

importing the gathered information by a Security Information and Event Management (SIEM) platform;

processing the gathered information to effectuate generating a plurality of raw threat data definitions associated with the gathered information from the private honey pot;

importing raw threat data from a plurality of threat data sources;

storing the raw threat data definitions associated with the gathered information from the private honey pot and raw threat data from the plurality of threat data sources into one or more database tables to provide a plurality of stored raw threat data definitions; and

processing the plurality of stored raw threat data definitions to be provided to one or more client devices, the processing the plurality of stored raw threat data definitions including one or more of:

deduplicating the plurality of raw threat data definitions;

converting the plurality of raw threat data definitions into a common format; and

determining an age level for each of the plurality of raw threat data definitions.

16. The computing system of claim 15 wherein the entity includes one or more of:

a company;

an organization;

a corporation; and

an individual.

17. The computing system of claim 15 wherein the unique identifier is a DNS address.

18. The computing system of claim 15 wherein the unique identifier is an IP address.

19. The computing system of claim 15 wherein the private honeypot computing device is a remote computing device.

20. The computing system of claim 15 , wherein processing the plurality of raw threat data definitions includes forming a master threat data definition.