The Georgia Tech Research Institute developed the open source system called BlackForest. The system collects information from hacker forums and other sites where malware developers post new code. BlackForest can help organizations understand the nature of the threat and whether it’s building toward a possible attack. The information can also be exported to a security information and event management product or an intrusion detection system. The analytics that draw relationships from the criminal activity is unique from other threat-intelligence services, a GTRI official says. It won’t be able to say for sure whether or when an attack will occur.”]