|
ACTI Abstract
|
actiabstract |
markdown |
Accenture CTI v2
|
No |
6
|
|
ACTI Analysis
|
actianalysis |
markdown |
Accenture CTI v2
|
No |
6
|
|
ACTI Attachment Links
|
actiattachmentlinks |
markdown |
Accenture CTI v2
|
No |
2
|
|
ACTI Conclusion
|
acticonclusion |
markdown |
Accenture CTI v2
|
No |
2
|
|
ACTI Index Timestamp
|
actiindextimestamp |
date |
Accenture CTI v2
|
No |
6
|
|
ACTI Last Modified
|
actilastmodified |
date |
Accenture CTI v2
|
No |
6
|
|
ACTI Last Published
|
actilastpublished |
date |
Accenture CTI v2
|
No |
6
|
|
ACTI Mitigation
|
actimitigation |
markdown |
Accenture CTI v2
|
No |
2
|
|
ACTI Report Title
|
actireporttitle |
markdown |
Accenture CTI v2
|
No |
6
|
|
ACTI Severity
|
actiseverity |
number |
Accenture CTI v2
|
No |
6
|
|
ACTI Threat Types
|
actithreattypes |
markdown |
Accenture CTI v2
|
No |
6
|
|
ACTI UUID
|
actiuuid |
shortText |
Accenture CTI v2
|
No |
6
|
|
AS Owner
|
asowner |
shortText |
Common Types
|
No |
2
|
|
ASN
|
asn |
shortText |
Common Types
|
No |
3
|
|
Abuse Type
|
abusetype |
singleSelect |
Cryptocurrency
|
No |
1
|
|
Account Type
|
accounttype |
shortText |
Common Types
|
No |
1
|
|
Acquisition Hire
|
acquisitionhire |
shortText |
Common Types
|
No |
1
|
|
Action
|
action |
shortText |
Common Types
|
No |
All
|
|
Actor
|
actor |
multiSelect |
Common Types
|
No |
All
|
|
Admin Country
|
admincountry |
shortText |
Common Types
|
No |
1
|
|
Admin Email
|
adminemail |
shortText |
Common Types
|
No |
3
|
|
Admin Name
|
adminname |
shortText |
Common Types
|
No |
1
|
|
Admin Phone
|
adminphone |
shortText |
Common Types
|
No |
1
|
|
Aliases
|
aliases |
tagsSelect |
Common Types
|
No |
7
|
|
Applications
|
applications |
markdown |
Common Types
|
No |
1
|
|
Architecture
|
architecture |
tagsSelect |
Common Types
|
No |
All
|
|
Assigned role
|
assignedrole |
role |
Common Types
|
No |
All
|
|
Assigned user
|
assigneduser |
user |
Common Types
|
No |
All
|
|
Associated File Names
|
associatedfilenames |
multiSelect |
Common Types
|
No |
1
|
|
Associations
|
associations |
tagsSelect |
Common Types
|
No |
All
|
|
Author
|
author |
shortText |
Common Types
|
No |
All
|
|
BIOS Version
|
biosversion |
shortText |
Common Types
|
No |
1
|
|
Behavior
|
behavior |
grid |
Common Types
|
No |
All
|
|
Blocked
|
blocked |
boolean |
Common Types
|
No |
All
|
|
CPE
|
cpe |
shortText |
Common Types
|
No |
All
|
|
CTIX - Is Deprecated
|
ctixisdeprecated |
boolean |
Cyware Intel Exchange
|
No |
27
|
|
CTIX - Is False Positive
|
ctixisfalsepositive |
boolean |
Cyware Intel Exchange
|
No |
27
|
|
CTIX - Is Reviewed
|
ctixisreviewed |
boolean |
Cyware Intel Exchange
|
No |
27
|
|
CTIX - Is Revoked
|
ctixisrevoked |
boolean |
Cyware Intel Exchange
|
No |
27
|
|
CTIX - Is Whitelisted
|
ctixiswhitelisted |
boolean |
Cyware Intel Exchange
|
No |
27
|
|
CTIX Custom Attributes
|
ctixcustomattributes |
longText |
Cyware Intel Exchange
|
No |
27
|
|
CTIX Custom Scores
|
ctixcustomscores |
longText |
Cyware Intel Exchange
|
No |
27
|
|
CTIX Enrichment
|
ctixenrichment |
longText |
Cyware Intel Exchange
|
No |
27
|
|
CTIX Relations
|
ctixrelations |
longText |
Cyware Intel Exchange
|
No |
27
|
|
CVE Description
|
cvedescription |
shortText |
Common Types
|
No |
1
|
|
CVE Modified
|
cvemodified |
date |
Common Types
|
No |
1
|
|
CVSS
|
cvss |
shortText |
Common Types
|
No |
1
|
|
CVSS 2.0 Severity
|
cvss20severity |
shortText |
Cybersixgill-DVE
|
No |
1
|
|
CVSS 2.0 score
|
cvss20score |
number |
Cybersixgill-DVE
|
No |
1
|
|
CVSS 3.1 score
|
cvss31score |
number |
Cybersixgill-DVE
|
No |
1
|
|
CVSS 3.1 severity
|
cvss31severity |
shortText |
Cybersixgill-DVE
|
No |
1
|
|
CVSS Score
|
cvssscore |
number |
Common Types
|
No |
All
|
|
CVSS Table
|
cvsstable |
grid |
Common Types
|
No |
All
|
|
CVSS Vector
|
cvssvector |
shortText |
Common Types
|
No |
1
|
|
CVSS Version
|
cvssversion |
number |
Common Types
|
No |
All
|
|
CVSS3
|
cvss3 |
grid |
Common Types
|
No |
1
|
|
Campaign
|
campaign |
multiSelect |
Common Types
|
No |
10
|
|
Capabilities
|
capabilities |
tagsSelect |
Common Types
|
No |
All
|
|
Category
|
category |
shortText |
Common Types
|
No |
All
|
|
Certificate Names
|
certificatenames |
longText |
Common Types
|
No |
1
|
|
Certificate Signature
|
certificatesignature |
grid |
Common Types
|
No |
1
|
|
Certificate Validation Checks
|
certificatevalidationchecks |
tagsSelect |
Common Types
|
No |
1
|
|
Certificates
|
certificates |
grid |
Common Types
|
No |
All
|
|
Chronicle Isolated Hostname
|
chronicleisolatedhostname |
singleSelect |
Google SecOps
|
No |
1
|
|
Chronicle Isolated IP
|
chronicleisolatedip |
singleSelect |
Google SecOps
|
No |
1
|
|
Chronicle Potentially Blocked IP
|
chroniclepotentiallyblockedip |
singleSelect |
Google SecOps
|
No |
1
|
|
ChronicleAsset Summary
|
chronicleassetsummary |
grid |
Google SecOps
|
No |
1
|
|
ChronicleAssetHostname
|
chronicleassethostname |
shortText |
Google SecOps
|
No |
1
|
|
ChronicleAssetIP
|
chronicleassetip |
shortText |
Google SecOps
|
No |
1
|
|
ChronicleAssetMAC
|
chronicleassetmac |
shortText |
Google SecOps
|
No |
1
|
|
ChronicleAssetProductID
|
chronicleassetproductid |
shortText |
Google SecOps
|
No |
1
|
|
City
|
city |
shortText |
Common Types
|
No |
1
|
|
Cofense Feed ASN Organization
|
cofensefeedasnorganization |
shortText |
Cofense Feed
|
No |
All
|
|
Cofense Feed Continent Code
|
cofensefeedcontinentcode |
shortText |
Cofense Feed
|
No |
All
|
|
Cofense Feed Continent Name
|
cofensefeedcontinentname |
shortText |
Cofense Feed
|
No |
All
|
|
Cofense Feed Entered Date
|
cofensefeedentereddate |
date |
Cofense Feed
|
No |
All
|
|
Cofense Feed File Name
|
cofensefeedfilename |
shortText |
Cofense Feed
|
No |
All
|
|
Cofense Feed ISP
|
cofensefeedisp |
shortText |
Cofense Feed
|
No |
All
|
|
Cofense Feed Infrastructure Type Description
|
cofensefeedinfrastructuretypedescription |
shortText |
Cofense Feed
|
No |
All
|
|
Cofense Feed Lookup On
|
cofensefeedlookupon |
number |
Cofense Feed
|
No |
All
|
|
Cofense Feed Postal Code
|
cofensefeedpostalcode |
shortText |
Cofense Feed
|
No |
All
|
|
Cofense Feed Role Description
|
cofensefeedroledescription |
shortText |
Cofense Feed
|
No |
All
|
|
Cofense Feed SHA224
|
cofensefeedsha224 |
shortText |
Cofense Feed
|
No |
All
|
|
Cofense Feed SHA384
|
cofensefeedsha384 |
shortText |
Cofense Feed
|
No |
All
|
|
Cofense Feed Subdivision Iso Code
|
cofensefeedsubdivisionisocode |
shortText |
Cofense Feed
|
No |
All
|
|
Cofense Feed Subdivision Name
|
cofensefeedsubdivisionname |
shortText |
Cofense Feed
|
No |
All
|
|
Cofense Feed Threat ID
|
cofensefeedthreatid |
markdown |
Cofense Feed
|
No |
All
|
|
Cofense Feed Time Zone
|
cofensefeedtimezone |
shortText |
Cofense Feed
|
No |
All
|
|
Commands
|
commands |
grid |
Common Types
|
No |
All
|
|
Community Notes
|
communitynotes |
grid |
Common Types
|
No |
All
|
|
Confidence
|
confidence |
shortText |
Common Types
|
No |
All
|
|
Cost Center
|
costcenter |
shortText |
Common Types
|
No |
1
|
|
Cost Center Code
|
costcentercode |
shortText |
Common Types
|
No |
1
|
|
Country Code
|
countrycode |
shortText |
Common Types
|
No |
All
|
|
Country Code Number
|
countrycodenumber |
shortText |
Common Types
|
No |
All
|
|
Country Name
|
countryname |
shortText |
Common Types
|
No |
1
|
|
Courses Of Action
|
mitrecourseofaction |
markdown |
MITRE IDs (Deprecated)
|
No |
1
|
|
Created (by MITRE)
|
mitrecreated |
date |
MITRE IDs (Deprecated)
|
No |
1
|
|
Creation Date
|
creationdate |
date |
Common Types
|
No |
All
|
|
Cryptocurrency Address Type
|
cryptocurrencyaddresstype |
shortText |
Cryptocurrency
|
No |
1
|
|
Cyble Behaviour Tags
|
cyblebehaviourtags |
multiSelect |
Cyble Threat Intel
|
No |
All
|
|
Cyble First Seen
|
cyblefirstseen |
date |
Cyble Threat Intel
|
No |
All
|
|
Cyble Last Seen
|
cyblelastseen |
date |
Cyble Threat Intel
|
No |
All
|
|
Cyble Related Malware
|
cyblerelatedmalware |
multiSelect |
Cyble Threat Intel
|
No |
All
|
|
Cyble Related Threat Actors
|
cyblerelatedthreatactors |
multiSelect |
Cyble Threat Intel
|
No |
All
|
|
Cyble Risk Score
|
cybleriskscore |
number |
Cyble Threat Intel
|
No |
All
|
|
Cyble Sources
|
cyblesources |
multiSelect |
Cyble Threat Intel
|
No |
All
|
|
Cyble Target Countries
|
cybletargetcountries |
multiSelect |
Cyble Threat Intel
|
No |
All
|
|
Cyble Target Industries
|
cybletargetindustries |
multiSelect |
Cyble Threat Intel
|
No |
All
|
|
Cyble Target Regions
|
cybletargetregions |
multiSelect |
Cyble Threat Intel
|
No |
All
|
|
Cyble Verdict
|
cybleverdict |
shortText |
Cyble Threat Intel
|
No |
All
|
|
Cyjax Techniques Tactics Procedures
|
cyjaxtechniquestacticsprocedures |
tagsSelect |
Cyjax Feed
|
No |
All
|
|
Cyjax industry types
|
cyjaxindustrytypes |
tagsSelect |
Cyjax Feed
|
No |
All
|
|
Cyren City Name
|
cyrencityname |
shortText |
Cyren Threat InDepth Threat Intelligence
|
No |
1
|
|
Cyren Country Code
|
cyrencountrycode |
shortText |
Cyren Threat InDepth Threat Intelligence
|
No |
1
|
|
Cyren Country Name
|
cyrencountryname |
shortText |
Cyren Threat InDepth Threat Intelligence
|
No |
1
|
|
Cyren Detection Categories
|
cyrendetectioncategories |
tagsSelect |
Cyren Threat InDepth Threat Intelligence
|
No |
3
|
|
Cyren Detection Date
|
cyrendetectiondate |
date |
Cyren Threat InDepth Threat Intelligence
|
No |
3
|
|
Cyren Detection Methods
|
cyrendetectionmethods |
tagsSelect |
Cyren Threat InDepth Threat Intelligence
|
No |
3
|
|
Cyren Feed Action
|
cyrenfeedaction |
shortText |
Cyren Threat InDepth Threat Intelligence
|
No |
3
|
|
Cyren Feed Relationships
|
cyrenfeedrelationships |
grid |
Cyren Threat InDepth Threat Intelligence
|
No |
All
|
|
Cyren Geo Location
|
cyrengeolocation |
shortText |
Cyren Threat InDepth Threat Intelligence
|
No |
1
|
|
Cyren IP Class
|
cyrenipclass |
shortText |
Cyren Threat InDepth Threat Intelligence
|
No |
1
|
|
Cyren IP Intensity
|
cyrenipintensity |
number |
Cyren Threat InDepth Threat Intelligence
|
No |
1
|
|
Cyren IP Risk
|
cyreniprisk |
number |
Cyren Threat InDepth Threat Intelligence
|
No |
1
|
|
Cyren Industries
|
cyrenindustries |
tagsSelect |
Cyren Threat InDepth Threat Intelligence
|
No |
1
|
|
Cyren Malware Family
|
cyrenmalwarefamily |
tagsSelect |
Cyren Threat InDepth Threat Intelligence
|
No |
1
|
|
Cyren Object Type
|
cyrenobjecttype |
shortText |
Cyren Threat InDepth Threat Intelligence
|
No |
1
|
|
Cyren Phishing Brands
|
cyrenphishingbrands |
tagsSelect |
Cyren Threat InDepth Threat Intelligence
|
No |
1
|
|
Cyren Port
|
cyrenport |
number |
Cyren Threat InDepth Threat Intelligence
|
No |
2
|
|
Cyren Protocol
|
cyrenprotocol |
shortText |
Cyren Threat InDepth Threat Intelligence
|
No |
2
|
|
Cyren Source Tags
|
cyrensourcetags |
tagsSelect |
Cyren Threat InDepth Threat Intelligence
|
No |
All
|
|
DHCP Server
|
dhcpserver |
shortText |
Common Types
|
No |
1
|
|
DNS
|
dns |
shortText |
Common Types
|
No |
1
|
|
DNS Records
|
dnsrecords |
grid |
Common Types
|
No |
All
|
|
Darkmon Classification
|
darkmonclassification |
shortText |
Darkmon
|
No |
4
|
|
Darkmon Compromise Sources
|
darkmoncompromisesources |
multiSelect |
Darkmon
|
No |
2
|
|
Darkmon First Compromise
|
darkmonfirstcompromise |
date |
Darkmon
|
No |
2
|
|
Darkmon Last Compromise
|
darkmonlastcompromise |
date |
Darkmon
|
No |
2
|
|
Darkmon Stealer Families
|
darkmonstealers |
multiSelect |
Darkmon
|
No |
2
|
|
Dataminr Pulse Affected Operating Systems
|
dataminrpulseaffectedoperatingsystems |
tagsSelect |
Dataminr Pulse
|
No |
1
|
|
Dataminr Pulse Aliases
|
dataminrpulsealiases |
tagsSelect |
Dataminr Pulse
|
No |
1
|
|
Dataminr Pulse EPSS Score
|
dataminrpulseepssscore |
shortText |
Dataminr Pulse
|
No |
1
|
|
Dataminr Pulse Exploit POC Links
|
dataminrpulseexploitpoclinks |
multiSelect |
Dataminr Pulse
|
No |
1
|
|
Dataminr Pulse Exploitable
|
dataminrpulseexploitable |
boolean |
Dataminr Pulse
|
No |
1
|
|
Dataminr Pulse Known Exploited Date
|
dataminrpulseknownexploiteddate |
date |
Dataminr Pulse
|
No |
1
|
|
Dataminr Pulse Malware Description
|
dataminrpulsemalwaredescription |
longText |
Dataminr Pulse
|
No |
1
|
|
Dataminr Pulse Malware YARA Rules
|
dataminrpulsemalwareyararules |
multiSelect |
Dataminr Pulse
|
No |
1
|
|
Dataminr Pulse Published Date
|
dataminrpulsepublisheddate |
date |
Dataminr Pulse
|
No |
1
|
|
Dataminr Pulse Threat Actor Description
|
dataminrpulsethreatactordescription |
longText |
Dataminr Pulse
|
No |
1
|
|
Dataminr Pulse Threat Actor TTPs
|
dataminrpulsethreatactorttps |
grid |
Dataminr Pulse
|
No |
1
|
|
Dataminr Pulse Vulnerability Description
|
dataminrpulsevulnerabilitydescription |
longText |
Dataminr Pulse
|
No |
1
|
|
Dataminr Pulse Vulnerable Products
|
dataminrpulsevulnerableproducts |
grid |
Dataminr Pulse
|
No |
1
|
|
Definition
|
definition |
shortText |
Common Types
|
No |
All
|
|
Department
|
department |
shortText |
Common Types
|
No |
1
|
|
Description
|
description |
markdown |
Common Types
|
No |
All
|
|
Detection Engines
|
detectionengines |
number |
Common Types
|
No |
All
|
|
Detections
|
detections |
grid |
Common Types
|
No |
All
|
|
DevSecOps Commit ID
|
devsecopscommitid |
shortText |
DevSecOps
|
No |
1
|
|
DevSecOps Message
|
devsecopsmessage |
shortText |
DevSecOps
|
No |
1
|
|
DevSecOps Rule ID
|
devsecopsruleid |
shortText |
DevSecOps
|
No |
1
|
|
DevSecOps SAST Category
|
devsecopssastcategory |
shortText |
DevSecOps
|
No |
1
|
|
DevSecOps SAST Precision
|
devsecopssastprecision |
shortText |
DevSecOps
|
No |
1
|
|
DevSecOps SAST Severity
|
devsecopssastseverity |
shortText |
DevSecOps
|
No |
1
|
|
Developer Tools param1
|
developertoolsparam1 |
shortText |
Developer Tools
|
No |
2
|
|
Developer Tools param2
|
developertoolsparam2 |
shortText |
Developer Tools
|
No |
1
|
|
Device Model
|
devicemodel |
shortText |
Common Types
|
No |
1
|
|
Display Name
|
displayname |
shortText |
Common Types
|
No |
2
|
|
Domain IDN Name
|
domainidnname |
shortText |
Common Types
|
No |
1
|
|
Domain Name
|
domainname |
shortText |
Common Types
|
No |
All
|
|
Domain Referring IPs
|
domainreferringips |
shortText |
Common Types
|
No |
1
|
|
Domain Referring Subnets
|
domainreferringsubnets |
shortText |
Common Types
|
No |
1
|
|
Domain Status
|
domainstatus |
shortText |
Common Types
|
No |
1
|
|
DomainTools Iris Additional Whois Emails
|
domaintoolsirisadditionalwhoisemails |
shortText |
DomainTools Iris Investigate
|
No |
1
|
|
DomainTools Iris Domain Age
|
domaintoolsirisdomainage |
shortText |
DomainTools Iris Investigate
|
No |
1
|
|
DomainTools Iris Email Domains
|
domaintoolsirisemaildomains |
shortText |
DomainTools Iris Investigate
|
No |
1
|
|
DomainTools Iris Expiration Date
|
domaintoolsirisexpirationdate |
shortText |
DomainTools Iris Investigate
|
No |
1
|
|
DomainTools Iris First Seen
|
domaintoolsirisfirstseen |
shortText |
DomainTools Iris Investigate
|
No |
1
|
|
DomainTools Iris IP Addresses
|
domaintoolsirisipaddresses |
shortText |
DomainTools Iris Investigate
|
No |
1
|
|
DomainTools Iris IP Country Code
|
domaintoolsirisipcountrycode |
shortText |
DomainTools Iris Investigate
|
No |
1
|
|
DomainTools Iris Mail Servers
|
domaintoolsirismailservers |
shortText |
DomainTools Iris Investigate
|
No |
1
|
|
DomainTools Iris Registrant Org
|
domaintoolsirisregistrantorg |
shortText |
DomainTools Iris Investigate
|
No |
1
|
|
DomainTools Iris Risk Score
|
domaintoolsirisriskscore |
shortText |
DomainTools Iris Investigate
|
No |
1
|
|
DomainTools Iris Risk Score Components
|
domaintoolsirisriskscorecomponents |
grid |
DomainTools Iris Investigate
|
No |
All
|
|
DomainTools Iris SOA Email
|
domaintoolsirissoaemail |
shortText |
DomainTools Iris Investigate
|
No |
1
|
|
DomainTools Iris Tags
|
domaintoolsiristags |
tagsSelect |
DomainTools Iris Investigate
|
No |
1
|
|
DomainTools Risk Score
|
domaintoolsriskscore |
shortText |
DomainTools Iris Detect
|
No |
1
|
|
DomainTools Risk Score Components
|
domaintoolsriskscorecomponents |
grid |
DomainTools Iris Detect
|
No |
1
|
|
DomainTools Risk Score Status
|
domaintoolsriskscorestatus |
shortText |
DomainTools Iris Detect
|
No |
1
|
|
Domains
|
domains |
grid |
Common Types
|
No |
All
|
|
Download URL
|
downloadurl |
shortText |
Common Types
|
No |
1
|
|
EclecticIQ Entity Description
|
eclecticiqentitydescription |
shortText |
EclecticIQ Platform
|
No |
All
|
|
EclecticIQ Entity ID
|
eclecticiqentityid |
shortText |
EclecticIQ Platform
|
No |
All
|
|
EclecticIQ Entity Title
|
eclecticiqentitytitle |
shortText |
EclecticIQ Platform
|
No |
All
|
|
EclecticIQ Entity Type
|
eclecticiqentitytype |
shortText |
EclecticIQ Platform
|
No |
All
|
|
EclecticIQ Feed ID
|
eclecticiqfeedid |
shortText |
EclecticIQ Platform
|
No |
All
|
|
EclecticIQ Source
|
eclecticiqsource |
shortText |
EclecticIQ Platform
|
No |
All
|
|
Email
|
email |
shortText |
Common Types
|
No |
1
|
|
Email Address
|
emailaddress |
shortText |
Common Types
|
No |
2
|
|
Employee Health Status
|
employeehealthstatus |
singleSelect |
Crisis Management
|
No |
1
|
|
Employee Response Status
|
employeeresponsestatus |
singleSelect |
Crisis Management
|
No |
1
|
|
Entry ID
|
entryid |
shortText |
Common Types
|
No |
1
|
|
Expanse Asset Type
|
expanseassettype |
shortText |
Cortex Xpanse by Palo Alto Networks (Deprecated)
|
No |
1
|
|
Expanse Business Units
|
expansebusinessunits |
tagsSelect |
Cortex Xpanse by Palo Alto Networks (Deprecated)
|
No |
4
|
|
Expanse Certificate Advertisement Status
|
expansecertificateadvertisementstatus |
tagsSelect |
Cortex Xpanse by Palo Alto Networks (Deprecated)
|
No |
1
|
|
Expanse Date Added
|
expansedateadded |
date |
Cortex Xpanse by Palo Alto Networks (Deprecated)
|
No |
1
|
|
Expanse Dns Resolution Status
|
expansednsresolutionstatus |
tagsSelect |
Cortex Xpanse by Palo Alto Networks (Deprecated)
|
No |
2
|
|
Expanse Domain
|
expansedomain |
shortText |
Cortex Xpanse by Palo Alto Networks (Deprecated)
|
No |
1
|
|
Expanse First Observed
|
expansefirstobserved |
date |
Cortex Xpanse by Palo Alto Networks (Deprecated)
|
No |
3
|
|
Expanse Last Observed
|
expanselastobserved |
date |
Cortex Xpanse by Palo Alto Networks (Deprecated)
|
No |
2
|
|
Expanse Properties
|
expanseproperties |
longText |
Cortex Xpanse by Palo Alto Networks (Deprecated)
|
No |
1
|
|
Expanse Provider Name
|
expanseprovidername |
shortText |
Cortex Xpanse by Palo Alto Networks (Deprecated)
|
No |
4
|
|
Expanse Service Status
|
expanseservicestatus |
tagsSelect |
Cortex Xpanse by Palo Alto Networks (Deprecated)
|
No |
3
|
|
Expanse Source Domain
|
expansesourcedomain |
shortText |
Cortex Xpanse by Palo Alto Networks (Deprecated)
|
No |
2
|
|
Expanse Tags
|
expansetags |
tagsSelect |
Cortex Xpanse by Palo Alto Networks (Deprecated)
|
No |
4
|
|
Expanse Tenant Name
|
expansetenantname |
shortText |
Cortex Xpanse by Palo Alto Networks (Deprecated)
|
No |
4
|
|
Expanse Type
|
expansetype |
shortText |
Cortex Xpanse by Palo Alto Networks (Deprecated)
|
No |
1
|
|
Expiration Date
|
expirationdate |
date |
Common Types
|
No |
1
|
|
Extension
|
extension |
grid |
Common Types
|
No |
All
|
|
External Id
|
externalid |
shortText |
Cybersixgill-DVE
|
No |
1
|
|
Feed Related Indicators
|
feedrelatedindicators |
grid |
Common Types
|
No |
All
|
|
FeedCyCognito Alive Endpoint
|
feedcycognitoaliveendpoint |
boolean |
CyCognito Feed
|
No |
2
|
|
FeedCyCognito Asset Discoverability
|
feedcycognitoassetdiscoverability |
singleSelect |
CyCognito Feed
|
No |
3
|
|
FeedCyCognito Asset ID
|
feedcycognitoassetid |
shortText |
CyCognito Feed
|
No |
3
|
|
FeedCyCognito Asset Type
|
feedcycognitoassettype |
singleSelect |
CyCognito Feed
|
No |
3
|
|
FeedCyCognito Business Units
|
feedcycognitobusinessunits |
multiSelect |
CyCognito Feed
|
No |
1
|
|
FeedCyCognito Certificate Signature
|
feedcycognitocertificatesignature |
shortText |
CyCognito Feed
|
No |
1
|
|
FeedCyCognito Closed Ports
|
feedcycognitoclosedports |
grid |
CyCognito Feed
|
No |
2
|
|
FeedCyCognito Comment
|
feedcycognitocomment |
longText |
CyCognito Feed
|
No |
3
|
|
FeedCyCognito Domains
|
feedcycognitodomains |
multiSelect |
CyCognito Feed
|
No |
1
|
|
FeedCyCognito Dynamically Resolved
|
feedcycognitodynamicallyresolved |
singleSelect |
CyCognito Feed
|
No |
2
|
|
FeedCyCognito Expiration
|
feedcycognitoexpiration |
date |
CyCognito Feed
|
No |
1
|
|
FeedCyCognito Hosting Types
|
feedcycognitohostingtypes |
singleSelect |
CyCognito Feed
|
No |
3
|
|
FeedCyCognito IP Addresses
|
feedcycognitoipaddresses |
multiSelect |
CyCognito Feed
|
No |
2
|
|
FeedCyCognito Investigation Status
|
feedcycognitoinvestigationstatus |
singleSelect |
CyCognito Feed
|
No |
3
|
|
FeedCyCognito Issuer Alternative Names
|
feedcycognitoissueralternativenames |
multiSelect |
CyCognito Feed
|
No |
1
|
|
FeedCyCognito Issuer Common Name
|
feedcycognitoissuercommonname |
shortText |
CyCognito Feed
|
No |
1
|
|
FeedCyCognito Issuer Country
|
feedcycognitoissuercountry |
shortText |
CyCognito Feed
|
No |
1
|
|
FeedCyCognito Issuer Locality
|
feedcycognitoissuerlocality |
shortText |
CyCognito Feed
|
No |
1
|
|
FeedCyCognito Issuer Organization
|
feedcycognitoissuerorganization |
shortText |
CyCognito Feed
|
No |
1
|
|
FeedCyCognito Issuer Organization Unit
|
feedcycognitoissuerorganizationunit |
shortText |
CyCognito Feed
|
No |
1
|
|
FeedCyCognito Issuer State
|
feedcycognitoissuerstate |
shortText |
CyCognito Feed
|
No |
1
|
|
FeedCyCognito Issues Count
|
feedcycognitoissuescount |
number |
CyCognito Feed
|
No |
3
|
|
FeedCyCognito Locations
|
feedcycognitolocations |
multiSelect |
CyCognito Feed
|
No |
3
|
|
FeedCyCognito Open Port Protocols
|
feedcycognitoopenportprotocols |
multiSelect |
CyCognito Feed
|
No |
2
|
|
FeedCyCognito Open Ports
|
feedcycognitoopenports |
grid |
CyCognito Feed
|
No |
2
|
|
FeedCyCognito Organizations
|
feedcycognitoorganizations |
multiSelect |
CyCognito Feed
|
No |
3
|
|
FeedCyCognito Security Grade
|
feedcycognitosecuritygrade |
singleSelect |
CyCognito Feed
|
No |
3
|
|
FeedCyCognito Severe Issues
|
feedcycognitosevereissues |
number |
CyCognito Feed
|
No |
3
|
|
FeedCyCognito Signature Algorithm
|
feedcycognitosignaturealgorithm |
shortText |
CyCognito Feed
|
No |
1
|
|
FeedCyCognito Status
|
feedcycognitostatus |
singleSelect |
CyCognito Feed
|
No |
3
|
|
FeedCyCognito Sub Domains
|
feedcycognitosubdomains |
multiSelect |
CyCognito Feed
|
No |
2
|
|
FeedCyCognito Subject Alternative Names
|
feedcycognitosubjectalternativenames |
multiSelect |
CyCognito Feed
|
No |
1
|
|
FeedCyCognito Subject Common Name
|
feedcycognitosubjectcommonname |
shortText |
CyCognito Feed
|
No |
1
|
|
FeedCyCognito Subject Country
|
feedcycognitosubjectcountry |
shortText |
CyCognito Feed
|
No |
1
|
|
FeedCyCognito Subject Locality
|
feedcycognitosubjectlocality |
shortText |
CyCognito Feed
|
No |
1
|
|
FeedCyCognito Subject Organization
|
feedcycognitosubjectorganization |
shortText |
CyCognito Feed
|
No |
1
|
|
FeedCyCognito Subject Organization Unit
|
feedcycognitosubjectorganizationunit |
shortText |
CyCognito Feed
|
No |
1
|
|
FeedCyCognito Subject State
|
feedcycognitosubjectstate |
shortText |
CyCognito Feed
|
No |
1
|
|
FeedCyCognito Tags
|
feedcycognitotags |
tagsSelect |
CyCognito Feed
|
No |
3
|
|
FeedMandiant Detections
|
feedmandiantdetections |
shortText |
Mandiant Advantage Feed (Deprecated)
|
No |
1
|
|
FeedMandiant Report Id
|
feedmandiantreportid |
shortText |
Mandiant Advantage Feed (Deprecated)
|
No |
1
|
|
FeedMandiant Version
|
feedmandiantversion |
shortText |
Mandiant Advantage Feed (Deprecated)
|
No |
1
|
|
File Extension
|
fileextension |
shortText |
Common Types
|
No |
1
|
|
File Type
|
filetype |
shortText |
Common Types
|
No |
1
|
|
First Name
|
firstname |
shortText |
Crisis Management
|
No |
1
|
|
First Seen By Source
|
firstseenbysource |
date |
Common Types
|
No |
All
|
|
Flashpoint Vulnerability Feed Alternate ID
|
flashpointvulnerabilityfeedalternateid |
number |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed CVE IDs
|
flashpointvulnerabilityfeedcveids |
multiSelect |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed CVSS V2s
|
flashpointvulnerabilityfeedcvssv2s |
grid |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed CVSS V3s
|
flashpointvulnerabilityfeedcvssv3s |
grid |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed CVSS V4s
|
flashpointvulnerabilityfeedcvssv4s |
grid |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed CVSS Vector
|
flashpointvulnerabilityfeedcvssvector |
shortText |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed CWEs
|
flashpointvulnerabilityfeedcwes |
grid |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Changelog
|
flashpointvulnerabilityfeedchangelog |
grid |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Classifications
|
flashpointvulnerabilityfeedclassifications |
grid |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Creditees
|
flashpointvulnerabilityfeedcreditees |
multiSelect |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Disclosed At
|
flashpointvulnerabilityfeeddisclosedat |
date |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Discovered At
|
flashpointvulnerabilityfeeddiscoveredat |
date |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed EPSS Score
|
flashpointvulnerabilityfeedepssscore |
shortText |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed EPSS V1 Score
|
flashpointvulnerabilityfeedepssv1score |
shortText |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Exploit Published At
|
flashpointvulnerabilityfeedexploitpublishedat |
date |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Exploited In The Wild At
|
flashpointvulnerabilityfeedexploitedinthewildat |
date |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Exploits
|
flashpointvulnerabilityfeedexploits |
grid |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Exploits Count
|
flashpointvulnerabilityfeedexploitscount |
number |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed External References
|
flashpointvulnerabilityfeedexternalreferences |
grid |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed ID
|
flashpointvulnerabilityfeedid |
number |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Keywords
|
flashpointvulnerabilityfeedkeywords |
shortText |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Last Modified At
|
flashpointvulnerabilityfeedlastmodifiedat |
date |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed NVD Additional Information
|
flashpointvulnerabilityfeednvdadditionalinformation |
grid |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Platform URL
|
flashpointvulnerabilityfeedplatformurl |
url |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Products and Vendors
|
flashpointvulnerabilityfeedproductsandvendors |
grid |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Published At
|
flashpointvulnerabilityfeedpublishedat |
date |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Ransomware Score
|
flashpointvulnerabilityfeedransomwarescore |
shortText |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Severity
|
flashpointvulnerabilityfeedseverity |
shortText |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Social Risk Scores
|
flashpointvulnerabilityfeedsocialriskscores |
grid |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Solution
|
flashpointvulnerabilityfeedsolution |
longText |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Solution Provided At
|
flashpointvulnerabilityfeedsolutionprovidedat |
date |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Status
|
flashpointvulnerabilityfeedstatus |
shortText |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Technical Description
|
flashpointvulnerabilityfeedtechnicaldescription |
longText |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Third Party Solution Provided At
|
flashpointvulnerabilityfeedthirdpartysolutionprovidedat |
date |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Time To Exploit
|
flashpointvulnerabilityfeedtimetoexploit |
shortText |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Time To Patch
|
flashpointvulnerabilityfeedtimetopatch |
shortText |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Time Unpatched
|
flashpointvulnerabilityfeedtimeunpatched |
shortText |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Title
|
flashpointvulnerabilityfeedtitle |
shortText |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Total Time To Exploit
|
flashpointvulnerabilityfeedtotaltimetoexploit |
shortText |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Total Time To Patch
|
flashpointvulnerabilityfeedtotaltimetopatch |
shortText |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Vendor Acknowledged At
|
flashpointvulnerabilityfeedvendoracknowledgedat |
date |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Vendor Informed At
|
flashpointvulnerabilityfeedvendorinformedat |
date |
Flashpoint Vulnerability Feed
|
No |
2
|
|
Flashpoint Vulnerability Feed Vendor Response Time
|
flashpointvulnerabilityfeedvendorresponsetime |
shortText |
Flashpoint Vulnerability Feed
|
No |
2
|
|
FlashpointFeed API
|
flashpointfeedapi |
url |
Flashpoint Feed
|
No |
5
|
|
FlashpointFeed APT Description
|
flashpointfeedaptdescription |
html |
Flashpoint Feed
|
No |
5
|
|
FlashpointFeed Attribute ID
|
flashpointfeedattributeid |
shortText |
Flashpoint Feed
|
No |
6
|
|
FlashpointFeed Attribute UUID
|
flashpointfeedattributeuuid |
shortText |
Flashpoint Feed
|
No |
6
|
|
FlashpointFeed Category
|
flashpointfeedcategory |
shortText |
Flashpoint Feed
|
No |
6
|
|
FlashpointFeed Created Date
|
flashpointfeedcreateddate |
date |
Flashpoint Feed
|
No |
5
|
|
FlashpointFeed Event Creator Email
|
flashpointfeedeventcreatoremail |
shortText |
Flashpoint Feed
|
No |
6
|
|
FlashpointFeed Event Href
|
flashpointfeedeventhref |
url |
Flashpoint Feed
|
No |
6
|
|
FlashpointFeed Event Information
|
flashpointfeedeventinformation |
longText |
Flashpoint Feed
|
No |
6
|
|
FlashpointFeed Event UUID
|
flashpointfeedeventuuid |
shortText |
Flashpoint Feed
|
No |
6
|
|
FlashpointFeed External References
|
flashpointfeedexternalreferences |
grid |
Flashpoint Feed
|
No |
5
|
|
FlashpointFeed HTML Malware Description
|
flashpointfeedhtmlmalwaredescription |
html |
Flashpoint Feed
|
No |
7
|
|
FlashpointFeed Indicator ID
|
flashpointfeedindicatorid |
shortText |
Flashpoint Feed
|
No |
5
|
|
FlashpointFeed Indicator Type
|
flashpointfeedindicatortype |
shortText |
Flashpoint Feed
|
No |
7
|
|
FlashpointFeed Last Score Date
|
flashpointfeedlastscoredate |
date |
Flashpoint Feed
|
No |
5
|
|
FlashpointFeed Last Seen Date
|
flashpointfeedlastseendate |
date |
Flashpoint Feed
|
No |
5
|
|
FlashpointFeed Latest Sighting
|
flashpointfeedlatestsighting |
grid |
Flashpoint Feed
|
No |
5
|
|
FlashpointFeed Malware Description
|
flashpointfeedmalwaredescription |
longText |
Flashpoint Feed
|
No |
6
|
|
FlashpointFeed Mitre Attack IDs
|
flashpointfeedmitreattackids |
grid |
Flashpoint Feed
|
No |
5
|
|
FlashpointFeed Modified Date
|
flashpointfeedmodifieddate |
date |
Flashpoint Feed
|
No |
5
|
|
FlashpointFeed Platform URL
|
flashpointfeedplatformurl |
url |
Flashpoint Feed
|
No |
5
|
|
FlashpointFeed Report
|
flashpointfeedreport |
url |
Flashpoint Feed
|
No |
6
|
|
FlashpointFeed Score Value
|
flashpointfeedscorevalue |
shortText |
Flashpoint Feed
|
No |
5
|
|
FlashpointFeed Sightings
|
flashpointfeedsightings |
grid |
Flashpoint Feed
|
No |
5
|
|
FlashpointFeed Timestamp
|
flashpointfeedtimestamp |
shortText |
Flashpoint Feed
|
No |
6
|
|
FlashpointFeed Total Sightings
|
flashpointfeedtotalsightings |
number |
Flashpoint Feed
|
No |
5
|
|
Force Sync
|
forcesync |
boolean |
Common Types
|
No |
1
|
|
Forum Post Total Count
|
intel471forumposttotalcount |
shortText |
Intel471 Feed
|
No |
1
|
|
Forum Total Count
|
intel471forumtotalcount |
shortText |
Intel471 Feed
|
No |
1
|
|
GIB Admiralty Code
|
gibadmiraltycode |
shortText |
Group-IB Threat Intelligence
|
No |
8
|
|
GIB CVSS Vector
|
gibcvssvector |
shortText |
Group-IB Threat Intelligence
|
No |
1
|
|
GIB Collection
|
gibcollection |
shortText |
Group-IB Threat Intelligence
|
No |
8
|
|
GIB Credibility
|
gibcredibility |
number |
Group-IB Threat Intelligence
|
No |
8
|
|
GIB Date Compromised
|
gibdatecompromised |
date |
Group-IB Threat Intelligence
|
No |
1
|
|
GIB File Name
|
gibfilename |
shortText |
Group-IB Threat Intelligence
|
No |
1
|
|
GIB Hash
|
gibhash |
shortText |
Group-IB Threat Intelligence
|
No |
All
|
|
GIB ID
|
gibid |
shortText |
Group-IB Threat Intelligence
|
No |
8
|
|
GIB Malware Name
|
gibmalwarename |
shortText |
Group-IB Threat Intelligence
|
No |
5
|
|
GIB Phishing Title
|
gibphishingtitle |
shortText |
Group-IB Threat Intelligence
|
No |
1
|
|
GIB Proxy Anonymous
|
gibproxyanonymous |
shortText |
Group-IB Threat Intelligence
|
No |
1
|
|
GIB Proxy Port
|
gibproxyport |
number |
Group-IB Threat Intelligence
|
No |
1
|
|
GIB Reliability
|
gibreliability |
number |
Group-IB Threat Intelligence
|
No |
8
|
|
GIB Severity
|
gibseverity |
shortText |
Group-IB Threat Intelligence
|
No |
8
|
|
GIB Software Mixed
|
gibsoftwaremixed |
markdown |
Group-IB Threat Intelligence
|
No |
1
|
|
GIB Target Brand
|
gibtargetbrand |
shortText |
Group-IB Threat Intelligence
|
No |
1
|
|
GIB Target Category
|
gibtargetcategory |
shortText |
Group-IB Threat Intelligence
|
No |
1
|
|
GIB Target Domain
|
gibtargetdomain |
shortText |
Group-IB Threat Intelligence
|
No |
1
|
|
GIB Threat Actor ID
|
gibthreatactorid |
shortText |
Group-IB Threat Intelligence
|
No |
6
|
|
GIB Threat Actor Name
|
gibthreatactorname |
shortText |
Group-IB Threat Intelligence
|
No |
6
|
|
GIB Threat Actor is APT
|
gibthreatactorisapt |
boolean |
Group-IB Threat Intelligence
|
No |
6
|
|
GTI Severity
|
gtiseverity |
shortText |
GoogleThreatIntelligence
|
No |
All
|
|
GTI Threat Score
|
gtithreatscore |
number |
GoogleThreatIntelligence
|
No |
All
|
|
GTI Verdict
|
gtiverdict |
shortText |
GoogleThreatIntelligence
|
No |
All
|
|
Geo Country
|
geocountry |
shortText |
Common Types
|
No |
4
|
|
Geo Location
|
geolocation |
shortText |
Common Types
|
No |
2
|
|
Given Name
|
givenname |
shortText |
Common Types
|
No |
1
|
|
Global Prevalence
|
globalprevalence |
number |
Common Types
|
No |
5
|
|
Goals
|
goals |
tagsSelect |
Common Types
|
No |
2
|
|
Groups
|
groups |
markdown |
Common Types
|
No |
1
|
|
Hostname
|
hostname |
shortText |
Common Types
|
No |
2
|
|
IP Address
|
ipaddress |
shortText |
Common Types
|
No |
All
|
|
Identity class
|
identityclass |
tagsSelect |
Common Types
|
No |
All
|
|
Implementation Languages
|
implementationlanguages |
tagsSelect |
Common Types
|
No |
All
|
|
Indicator Identification
|
indicatoridentification |
shortText |
Common Types
|
No |
3
|
|
Industry sectors
|
industrysectors |
tagsSelect |
Common Types
|
No |
All
|
|
Infrastructure Types
|
infrastructuretypes |
tagsSelect |
Common Types
|
No |
1
|
|
Instant Message Total Count
|
intel471instantmessagetotalcount |
shortText |
Intel471 Feed
|
No |
1
|
|
Intel471 Info Stealer Antivirus Software
|
intel471infostealerantivirussoftware |
shortText |
Intel471 Feed
|
No |
2
|
|
Intel471 Info Stealer Computer Username
|
intel471infostealercomputerusername |
shortText |
Intel471 Feed
|
No |
2
|
|
Intel471 Info Stealer IP
|
intel471infostealerip |
shortText |
Intel471 Feed
|
No |
2
|
|
Intel471 Info Stealer ISP
|
intel471infostealerisp |
shortText |
Intel471 Feed
|
No |
2
|
|
Intel471 Info Stealer Infection Timestamp
|
intel471infostealerinfectiontimestamp |
date |
Intel471 Feed
|
No |
2
|
|
Intel471 Info Stealer Machine Id
|
intel471infostealermachineid |
shortText |
Intel471 Feed
|
No |
2
|
|
Intel471 Info Stealer Malware Family
|
intel471infostealermalwarefamily |
shortText |
Intel471 Feed
|
No |
2
|
|
Intel471 Info Stealer Malware Install Path
|
intel471infostealermalwareinstallpath |
shortText |
Intel471 Feed
|
No |
2
|
|
Intel471 Info Stealer OS
|
intel471infostealeros |
shortText |
Intel471 Feed
|
No |
2
|
|
Intel471 Info Stealer PC Name
|
intel471infostealerpcname |
shortText |
Intel471 Feed
|
No |
2
|
|
Intel471 Info Stealer Screenshot Path
|
intel471infostealerscreenshotpath |
shortText |
Intel471 Feed
|
No |
2
|
|
Intel471 Info Stealer Version
|
intel471infostealerversion |
shortText |
Intel471 Feed
|
No |
2
|
|
Internal
|
internal |
boolean |
Common Types
|
No |
7
|
|
Iris Detect Changed Date
|
irisdetectchangeddate |
shortText |
DomainTools Iris Detect
|
No |
1
|
|
Iris Detect Discovered Date
|
irisdetectdiscovereddate |
shortText |
DomainTools Iris Detect
|
No |
1
|
|
Iris Detect Domain ID
|
irisdetectdomainid |
shortText |
DomainTools Iris Detect
|
No |
1
|
|
Iris Detect Domain State
|
irisdetectdomainstate |
shortText |
DomainTools Iris Detect
|
No |
1
|
|
Iris Detect Domain Status
|
irisdetectdomainstatus |
shortText |
DomainTools Iris Detect
|
No |
1
|
|
Iris Detect Escalations
|
irisdetectescalations |
grid |
DomainTools Iris Detect
|
No |
1
|
|
Iris Detect Hosting IP Details
|
irisdetecthostingipdetails |
grid |
DomainTools Iris Detect
|
No |
1
|
|
Iris Detect Mail Server Details
|
irisdetectmailserverdetails |
grid |
DomainTools Iris Detect
|
No |
1
|
|
Iris Detect Mail servers Exists
|
irisdetectmailserversexists |
shortText |
DomainTools Iris Detect
|
No |
All
|
|
Iris Detect Term
|
irisdetectterm |
shortText |
DomainTools Iris Detect
|
No |
All
|
|
Is Malware Family
|
ismalwarefamily |
boolean |
Common Types
|
No |
1
|
|
Is Processed
|
isprocessed |
boolean |
Common Types
|
No |
1
|
|
Issuer
|
issuer |
grid |
Common Types
|
No |
1
|
|
Issuer DN
|
issuerdn |
shortText |
Common Types
|
No |
1
|
|
JARM Hosts
|
jarmtags |
tagsSelect |
JARM
|
No |
1
|
|
Job Code
|
jobcode |
shortText |
Common Types
|
No |
1
|
|
Job Family
|
jobfamily |
shortText |
Common Types
|
No |
1
|
|
Job Function
|
jobfunction |
shortText |
Common Types
|
No |
1
|
|
Job Title
|
jobtitle |
shortText |
Crisis Management
|
No |
1
|
|
Key Value
|
keyvalue |
grid |
Common Types
|
No |
All
|
|
Kill Chain Phases
|
killchainphases |
multiSelect |
Common Types
|
No |
3
|
|
Languages
|
languages |
tagsSelect |
Common Types
|
No |
All
|
|
Last Name
|
lastname |
shortText |
Crisis Management
|
No |
1
|
|
Last Seen By Source
|
lastseenbysource |
date |
Common Types
|
No |
All
|
|
Leadership
|
leadership |
shortText |
Common Types
|
No |
1
|
|
Location
|
location |
shortText |
Common Types
|
No |
1
|
|
Location Region
|
locationregion |
shortText |
Common Types
|
No |
1
|
|
MAC Address
|
macaddress |
shortText |
Common Types
|
No |
1
|
|
MD5
|
md5 |
shortText |
Common Types
|
No |
1
|
|
MITRE Aliases
|
mitrealiases |
shortText |
MITRE IDs (Deprecated)
|
No |
1
|
|
MITRE Contributors
|
mitrecontributors |
shortText |
MITRE IDs (Deprecated)
|
No |
1
|
|
MITRE Data Sources
|
mitredatasources |
shortText |
MITRE IDs (Deprecated)
|
No |
1
|
|
MITRE Defense Bypassed
|
mitredefensebypassed |
shortText |
MITRE IDs (Deprecated)
|
No |
1
|
|
MITRE Description
|
mitredescription |
markdown |
MITRE IDs (Deprecated)
|
No |
1
|
|
MITRE Detection
|
mitredetection |
markdown |
MITRE IDs (Deprecated)
|
No |
1
|
|
MITRE Extended Aliases
|
mitreextendedaliases |
shortText |
MITRE IDs (Deprecated)
|
No |
1
|
|
MITRE External References
|
mitreexternalreferences |
grid |
MITRE IDs (Deprecated)
|
No |
All
|
|
MITRE Impact Type
|
mitreimpacttype |
shortText |
MITRE IDs (Deprecated)
|
No |
1
|
|
MITRE Kill Chain Phases
|
mitrekillchainphases |
grid |
MITRE IDs (Deprecated)
|
No |
1
|
|
MITRE Labels
|
mitrelabels |
shortText |
MITRE IDs (Deprecated)
|
No |
1
|
|
MITRE Name
|
mitrename |
shortText |
MITRE IDs (Deprecated)
|
No |
1
|
|
MITRE Permissions Required
|
mitrepermissionsrequired |
shortText |
MITRE IDs (Deprecated)
|
No |
1
|
|
MITRE Platforms
|
mitreplatforms |
shortText |
MITRE IDs (Deprecated)
|
No |
1
|
|
MITRE System Requirements
|
mitresystemrequirements |
shortText |
MITRE IDs (Deprecated)
|
No |
1
|
|
MITRE Type
|
mitretype |
shortText |
MITRE IDs (Deprecated)
|
No |
1
|
|
MITRE Version
|
mitreversion |
shortText |
MITRE IDs (Deprecated)
|
No |
1
|
|
Malware Family
|
malwarefamily |
multiSelect |
Common Types
|
No |
All
|
|
Malware types
|
malwaretypes |
multiSelect |
Common Types
|
No |
3
|
|
Manager Email Address
|
manageremailaddress |
shortText |
Common Types
|
No |
1
|
|
Manager Name
|
managername |
shortText |
Common Types
|
No |
1
|
|
Memory
|
memory |
number |
Common Types
|
No |
1
|
|
Mitre ID
|
mitreid |
shortText |
Common Types
|
No |
8
|
|
Mitre Tactics
|
mitretactics |
shortText |
Common Types
|
No |
3
|
|
Mobile Phone
|
mobilephone |
shortText |
Common Types
|
No |
1
|
|
Modified (by MITRE)
|
mitremodified |
date |
MITRE IDs (Deprecated)
|
No |
1
|
|
NVD Last Modified Date
|
nvdlastmodifieddate |
date |
Cybersixgill-DVE
|
No |
1
|
|
NVD Link
|
nvdlink |
url |
Cybersixgill-DVE
|
No |
1
|
|
NVD Publication Date
|
nvdpublicationdate |
date |
Cybersixgill-DVE
|
No |
1
|
|
NVD Vector - v 2.0
|
nvdvectorv20 |
shortText |
Cybersixgill-DVE
|
No |
1
|
|
NVD Vector - v 3.1
|
nvdvectorv31 |
shortText |
Cybersixgill-DVE
|
No |
1
|
|
Name
|
name |
shortText |
Common Types
|
No |
0
|
|
Name Field
|
namefield |
shortText |
Common Types
|
No |
1
|
|
Name Servers
|
nameservers |
multiSelect |
Common Types
|
No |
1
|
|
Number of subkeys
|
numberofsubkeys |
number |
Common Types
|
No |
1
|
|
OS Version
|
osversion |
shortText |
Common Types
|
No |
1
|
|
Objective
|
objective |
shortText |
Common Types
|
No |
1
|
|
Office365Category
|
office365category |
shortText |
Common Types
|
No |
6
|
|
Office365ExpressRoute
|
office365expressroute |
boolean |
Common Types
|
No |
6
|
|
Office365Required
|
office365required |
boolean |
Common Types
|
No |
6
|
|
Operating System
|
operatingsystem |
shortText |
Common Types
|
No |
1
|
|
Operating System Refs
|
operatingsystemrefs |
tagsSelect |
Common Types
|
No |
3
|
|
Operating System Version
|
operatingsystemversion |
shortText |
Common Types
|
No |
1
|
|
Org Level 1
|
orglevel1 |
shortText |
Common Types
|
No |
All
|
|
Org Level 2
|
orglevel2 |
shortText |
Common Types
|
No |
All
|
|
Org Level 3
|
orglevel3 |
shortText |
Common Types
|
No |
All
|
|
Org Unit
|
orgunit |
shortText |
Common Types
|
No |
All
|
|
Organization
|
organization |
shortText |
Common Types
|
No |
2
|
|
Organization First Seen
|
organizationfirstseen |
date |
Common Types
|
No |
5
|
|
Organization Last Seen
|
organizationlastseen |
date |
Common Types
|
No |
5
|
|
Organization Prevalence
|
organizationprevalence |
number |
Common Types
|
No |
5
|
|
Organization Type
|
organizationtype |
shortText |
Common Types
|
No |
1
|
|
Organizational Unit (OU)
|
organizationalunitou |
shortText |
Common Types
|
No |
1
|
|
Orion Engine Detection Names
|
orionenginedetectionnames |
tagsSelect |
OrionMalware
|
No |
4
|
|
Orion Engine Detections
|
orionenginedetections |
number |
OrionMalware
|
No |
4
|
|
Orion Engine Vendors
|
orionenginevendors |
tagsSelect |
OrionMalware
|
No |
4
|
|
PEM
|
pem |
longText |
Common Types
|
No |
1
|
|
Path
|
path |
shortText |
Common Types
|
No |
2
|
|
Paths
|
paths |
grid |
Common Types
|
No |
All
|
|
Personal Email
|
personalemail |
shortText |
Common Types
|
No |
1
|
|
Port
|
port |
tagsSelect |
Common Types
|
No |
4
|
|
Positive Detections
|
positivedetections |
number |
Common Types
|
No |
All
|
|
Previous level
|
previouslevel |
shortText |
Cybersixgill-DVE
|
No |
1
|
|
Primary Motivation
|
primarymotivation |
multiSelect |
Common Types
|
No |
5
|
|
Prisma Cloud Compute Impact Table
|
prismacloudcomputeimpacttable |
markdown |
Prisma Cloud Compute Reporting (Deprecated)
|
No |
All
|
|
Processor
|
processor |
number |
Common Types
|
No |
1
|
|
Processors
|
processors |
number |
Common Types
|
No |
1
|
|
Product
|
product |
shortText |
Common Types
|
No |
All
|
|
Public Key
|
publickey |
grid |
Common Types
|
No |
1
|
|
Publications
|
publications |
grid |
Common Types
|
No |
All
|
|
Published
|
published |
date |
Common Types
|
No |
1
|
|
Quarantined
|
quarantined |
boolean |
Common Types
|
No |
2
|
|
Query Language
|
querylanguage |
shortText |
Common Types
|
No |
All
|
|
RSS Feed Raw Content
|
rssfeedrawcontent |
longText |
RSS Feed
|
No |
1
|
|
Rank
|
rank |
grid |
Common Types
|
No |
All
|
|
Raw Address
|
rawaddress |
shortText |
Cryptocurrency
|
No |
1
|
|
Raw Rule
|
rawrule |
markdown |
Yara
|
No |
1
|
|
Recorded Future Evidence Details
|
recordedfutureevidencedetails |
grid |
Recorded Future Feed
|
No |
7
|
|
Recorded Future Feed Threat assessment
|
recordedfuturefeedthreatassessment |
shortText |
Recorded Future Feed
|
No |
All
|
|
Recorded Future Risk Rule Count
|
fieldrecordedfutureriskrules |
shortText |
Recorded Future Feed
|
No |
All
|
|
Recorded Future Risk Score
|
recordedfutureriskscore |
number |
Recorded Future Feed
|
No |
7
|
|
RecordedFuture Risk rules
|
recordedfutureriskrules |
tagsSelect |
Recorded Future Intelligence
|
No |
All
|
|
RecordedFuture Threat assessment
|
recordedfuturethreatassessment |
shortText |
Recorded Future Intelligence
|
No |
All
|
|
Region
|
region |
shortText |
Common Types
|
No |
5
|
|
Registrant Country
|
registrantcountry |
shortText |
Common Types
|
No |
3
|
|
Registrant Email
|
registrantemail |
shortText |
Common Types
|
No |
3
|
|
Registrant Name
|
registrantname |
shortText |
Common Types
|
No |
3
|
|
Registrant Phone
|
registrantphone |
shortText |
Common Types
|
No |
3
|
|
Registrar Abuse Address
|
registrarabuseaddress |
shortText |
Common Types
|
No |
1
|
|
Registrar Abuse Country
|
registrarabusecountry |
shortText |
Common Types
|
No |
1
|
|
Registrar Abuse Email
|
registrarabuseemail |
shortText |
Common Types
|
No |
3
|
|
Registrar Abuse Name
|
registrarabusename |
shortText |
Common Types
|
No |
1
|
|
Registrar Abuse Network
|
registrarabusenetwork |
shortText |
Common Types
|
No |
1
|
|
Registrar Abuse Phone
|
registrarabusephone |
shortText |
Common Types
|
No |
3
|
|
Registrar Name
|
registrarname |
shortText |
Common Types
|
No |
3
|
|
Report Object References
|
reportobjectreferences |
grid |
Common Types
|
No |
All
|
|
Report Total Count
|
intel471reporttotalcount |
shortText |
Intel471 Feed
|
No |
1
|
|
Report type
|
reporttype |
shortText |
Common Types
|
No |
All
|
|
Reported By
|
reportedby |
tagsSelect |
Common Types
|
No |
All
|
|
Reports
|
reports |
multiSelect |
Common Types
|
No |
All
|
|
Reports Count
|
reportscount |
shortText |
Cryptocurrency
|
No |
1
|
|
Resource Level
|
resourcelevel |
multiSelect |
Common Types
|
No |
2
|
|
RiskIQAsset Added To Inventory
|
riskiqassetaddedtoinventory |
date |
RiskIQ Digital Footprint
|
No |
1
|
|
RiskIQAsset Brands
|
riskiqassetbrands |
tagsSelect |
RiskIQ Digital Footprint
|
No |
1
|
|
RiskIQAsset CVEs
|
riskiqassetcves |
tagsSelect |
RiskIQ Digital Footprint
|
No |
1
|
|
RiskIQAsset Confidence
|
riskiqassetconfidence |
singleSelect |
RiskIQ Digital Footprint
|
No |
1
|
|
RiskIQAsset Enterprise Asset
|
riskiqassetenterpriseasset |
singleSelect |
RiskIQ Digital Footprint
|
No |
1
|
|
RiskIQAsset First Seen
|
riskiqassetfirstseen |
date |
RiskIQ Digital Footprint
|
No |
1
|
|
RiskIQAsset Inventory Status
|
riskiqassetinventorystatus |
singleSelect |
RiskIQ Digital Footprint
|
No |
1
|
|
RiskIQAsset Last Seen
|
riskiqassetlastseen |
date |
RiskIQ Digital Footprint
|
No |
1
|
|
RiskIQAsset Last Updated
|
riskiqassetlastupdated |
date |
RiskIQ Digital Footprint
|
No |
1
|
|
RiskIQAsset Organizations
|
riskiqassetorganizations |
tagsSelect |
RiskIQ Digital Footprint
|
No |
1
|
|
RiskIQAsset Priority
|
riskiqassetpriority |
singleSelect |
RiskIQ Digital Footprint
|
No |
1
|
|
RiskIQAsset Tags
|
riskiqassettags |
tagsSelect |
RiskIQ Digital Footprint
|
No |
1
|
|
RiskIQAsset Type
|
riskiqassettype |
singleSelect |
RiskIQ Digital Footprint
|
No |
All
|
|
RiskIQAsset UUID
|
riskiqassetuuid |
shortText |
RiskIQ Digital Footprint
|
No |
1
|
|
Roles
|
roles |
multiSelect |
Common Types
|
No |
1
|
|
Rule Condition
|
rulecondition |
shortText |
Yara
|
No |
1
|
|
Rule ID
|
ruleid |
shortText |
Yara
|
No |
1
|
|
Rule Reference
|
rulereference |
url |
Yara
|
No |
1
|
|
Rule Strings
|
rulestrings |
grid |
Yara
|
No |
1
|
|
SHA1
|
sha1 |
shortText |
Common Types
|
No |
1
|
|
SHA256
|
sha256 |
shortText |
Common Types
|
No |
1
|
|
SHA512
|
sha512 |
shortText |
Common Types
|
No |
1
|
|
SISCategory
|
siscategory |
shortText |
Security Intelligence Services Feed
|
No |
1
|
|
SISExpiration
|
sisexpiration |
date |
Security Intelligence Services Feed
|
No |
1
|
|
SISMalwareType
|
sismalwaretype |
shortText |
Security Intelligence Services Feed
|
No |
1
|
|
SISMatchType
|
sismatchtype |
shortText |
Security Intelligence Services Feed
|
No |
1
|
|
SPKI SHA256
|
spkisha256 |
shortText |
Common Types
|
No |
1
|
|
SSDeep
|
ssdeep |
shortText |
Common Types
|
No |
1
|
|
STIX Aliases
|
stixaliases |
tagsSelect |
Common Types
|
No |
4
|
|
STIX Description
|
stixdescription |
markdown |
Common Types
|
No |
5
|
|
STIX Goals
|
stixgoals |
tagsSelect |
Common Types
|
No |
1
|
|
STIX ID
|
stixid |
shortText |
Common Types
|
No |
All
|
|
STIX Indicator Description
|
stixindicatordescription |
longText |
TAXII Feed
|
No |
All
|
|
STIX Indicator Name
|
stixindicatorname |
shortText |
TAXII Feed
|
No |
All
|
|
STIX Is Malware Family
|
stixismalwarefamily |
boolean |
Common Types
|
No |
1
|
|
STIX Kill Chain Phases
|
stixkillchainphases |
multiSelect |
Common Types
|
No |
All
|
|
STIX Malware Types
|
stixmalwaretypes |
multiSelect |
Common Types
|
No |
1
|
|
STIX Primary Motivation.
|
stixprimarymotivation |
multiSelect |
Common Types
|
No |
1
|
|
STIX Resource Level
|
stixresourcelevel |
multiSelect |
Common Types
|
No |
1
|
|
STIX Roles
|
stixroles |
multiSelect |
Common Types
|
No |
1
|
|
STIX Secondary Motivations
|
stixsecondarymotivations |
multiSelect |
Common Types
|
No |
1
|
|
STIX Sophistication
|
stixsophistication |
multiSelect |
Common Types
|
No |
1
|
|
STIX TTP Title
|
stixttptitle |
shortText |
TAXII Feed
|
No |
All
|
|
STIX Threat Actor Types
|
stixthreatactortypes |
multiSelect |
Common Types
|
No |
1
|
|
STIX Tool Types
|
stixtooltypes |
multiSelect |
Common Types
|
No |
1
|
|
STIX Tool Version
|
stixtoolversion |
shortText |
Common Types
|
No |
1
|
|
SWID
|
swid |
markdown |
Common Types
|
No |
All
|
|
SafeBreach Attack Ids
|
safebreachattackids |
tagsSelect |
SafeBreach - Breach and Attack Simulation platform
|
No |
5
|
|
SafeBreach Insight Ids
|
safebreachinsightids |
tagsSelect |
SafeBreach - Breach and Attack Simulation platform
|
No |
5
|
|
SafeBreach Is Behavioral
|
safebreachisbehavioral |
boolean |
SafeBreach - Breach and Attack Simulation platform
|
No |
5
|
|
SafeBreach Remediation Status
|
safebreachremediationstatus |
singleSelect |
SafeBreach - Breach and Attack Simulation platform
|
No |
9
|
|
SafeBreach Severity
|
safebreachseverity |
shortText |
SafeBreach - Breach and Attack Simulation platform
|
No |
5
|
|
SafeBreach Severity Score
|
safebreachseverityscore |
number |
SafeBreach - Breach and Attack Simulation platform
|
No |
5
|
|
Samples
|
samples |
grid |
Common Types
|
No |
1
|
|
Secondary Motivations
|
secondarymotivations |
multiSelect |
Common Types
|
No |
2
|
|
Serial Number
|
serialnumber |
shortText |
Common Types
|
No |
All
|
|
Service
|
service |
shortText |
Common Types
|
No |
All
|
|
Short Description
|
shortdescription |
markdown |
Common Types
|
No |
13
|
|
Sigma Condition
|
sigmacondition |
grid |
Sigma
|
No |
All
|
|
Sigma Converted Query
|
sigmaconvertedquery |
shortText |
Sigma
|
No |
1
|
|
Sigma Detection
|
sigmadetection |
grid |
Sigma
|
No |
1
|
|
Sigma False Positives
|
sigmafalsepositives |
grid |
Sigma
|
No |
1
|
|
Sigma Rule ID
|
sigmaruleid |
shortText |
Sigma
|
No |
1
|
|
Sigma Rule Level
|
sigmarulelevel |
singleSelect |
Sigma
|
No |
1
|
|
Sigma Rule License
|
sigmarulelicense |
shortText |
Sigma
|
No |
1
|
|
Sigma Rule Raw
|
sigmaruleraw |
longText |
Sigma
|
No |
1
|
|
Sigma Rule Status
|
sigmarulestatus |
singleSelect |
Sigma
|
No |
All
|
|
Signature Algorithm
|
signaturealgorithm |
tagsSelect |
Common Types
|
No |
All
|
|
Signature Authentihash
|
signatureauthentihash |
shortText |
Common Types
|
No |
1
|
|
Signature Copyright
|
signaturecopyright |
shortText |
Common Types
|
No |
1
|
|
Signature Description
|
signaturedescription |
shortText |
Common Types
|
No |
1
|
|
Signature File Version
|
signaturefileversion |
shortText |
Common Types
|
No |
1
|
|
Signature Internal Name
|
signatureinternalname |
shortText |
Common Types
|
No |
1
|
|
Signature Original Name
|
signatureoriginalname |
shortText |
Common Types
|
No |
1
|
|
Signed
|
signed |
boolean |
Common Types
|
No |
2
|
|
Sixgill - Previously Exploited Probability
|
sixgillpreviouslyexploitedprobability |
number |
Cybersixgill-DVE
|
No |
1
|
|
Sixgill Actor
|
sixgillactor |
shortText |
Sixgill Darkfeed - Annual Subscription
|
No |
4
|
|
Sixgill DVE Score - Current
|
sixgilldvescorecurrent |
number |
Cybersixgill-DVE
|
No |
1
|
|
Sixgill DVE Score - Highest Ever
|
sixgilldvescorehighestever |
number |
Cybersixgill-DVE
|
No |
1
|
|
Sixgill DVE Score - Highest Ever Date
|
sixgilldvescorehighesteverdate |
date |
Cybersixgill-DVE
|
No |
1
|
|
Sixgill Description
|
sixgilldescription |
shortText |
Sixgill Darkfeed - Annual Subscription
|
No |
4
|
|
Sixgill Feed ID
|
sixgillfeedid |
shortText |
Sixgill Darkfeed - Annual Subscription
|
No |
4
|
|
Sixgill Feed Name
|
sixgillfeedname |
shortText |
Sixgill Darkfeed - Annual Subscription
|
No |
4
|
|
Sixgill Indicator ID
|
sixgillindicatorid |
shortText |
Sixgill Darkfeed - Annual Subscription
|
No |
4
|
|
Sixgill Language
|
sixgilllanguage |
shortText |
Sixgill Darkfeed - Annual Subscription
|
No |
4
|
|
Sixgill Mitre ATT&CK Tactic
|
sixgillmitreattcktactic |
shortText |
Sixgill Darkfeed - Annual Subscription
|
No |
4
|
|
Sixgill Mitre ATT&CK Technique
|
sixgillmitreattcktechnique |
shortText |
Sixgill Darkfeed - Annual Subscription
|
No |
4
|
|
Sixgill Post Reference
|
sixgillpostreference |
url |
Sixgill Darkfeed - Annual Subscription
|
No |
4
|
|
Sixgill Post Title
|
sixgillposttitle |
shortText |
Sixgill Darkfeed - Annual Subscription
|
No |
4
|
|
Sixgill Source
|
sixgillsource |
shortText |
Sixgill Darkfeed - Annual Subscription
|
No |
4
|
|
Sixgill Virus Total Detection Rate
|
sixgillvirustotaldetectionrate |
shortText |
Sixgill Darkfeed - Annual Subscription
|
No |
4
|
|
Sixgill Virus Total URL
|
sixgillvirustotalurl |
url |
Sixgill Darkfeed - Annual Subscription
|
No |
4
|
|
Sixgill_Event Action
|
eventaction |
shortText |
Cybersixgill-DVE
|
No |
1
|
|
Sixgill_Event Datetime
|
eventdatetime |
date |
Cybersixgill-DVE
|
No |
1
|
|
Sixgill_Event Description
|
eventdescription |
longText |
Cybersixgill-DVE
|
No |
1
|
|
Sixgill_Event Name
|
eventname |
shortText |
Cybersixgill-DVE
|
No |
1
|
|
Sixgill_Event Type
|
eventtype |
shortText |
Cybersixgill-DVE
|
No |
1
|
|
Size
|
size |
number |
Common Types
|
No |
1
|
|
Sophistication
|
sophistication |
multiSelect |
Common Types
|
No |
1
|
|
Source Original Severity
|
sourceoriginalseverity |
shortText |
Common Types
|
No |
All
|
|
Source Priority
|
sourcepriority |
number |
Common Types
|
No |
1
|
|
State
|
state |
shortText |
Common Types
|
No |
1
|
|
Street Address
|
streetaddress |
shortText |
Common Types
|
No |
1
|
|
Subdomains
|
subdomains |
multiSelect |
Common Types
|
No |
1
|
|
Subject
|
subject |
grid |
Common Types
|
No |
1
|
|
Subject Alternative Names
|
subjectalternativenames |
grid |
Common Types
|
No |
1
|
|
Subject DN
|
subjectdn |
shortText |
Common Types
|
No |
1
|
|
Surname
|
surname |
shortText |
Common Types
|
No |
1
|
|
Tags
|
tags |
tagsSelect |
Common Types
|
No |
All
|
|
Target Countries
|
targetcountries |
tagsSelect |
DeCYFIR
|
No |
All
|
|
Target Industries
|
targetindustries |
tagsSelect |
DeCYFIR
|
No |
All
|
|
Targets
|
targets |
multiSelect |
Common Types
|
No |
All
|
|
Technologies
|
technologies |
tagsSelect |
DeCYFIR
|
No |
All
|
|
Threat Actor Types
|
threatactortypes |
multiSelect |
Common Types
|
No |
1
|
|
Threat Types
|
threattypes |
grid |
Common Types
|
No |
All
|
|
Title
|
title |
shortText |
Common Types
|
No |
1
|
|
Tool Types
|
tooltypes |
multiSelect |
Common Types
|
No |
1
|
|
Tool Version
|
toolversion |
shortText |
Common Types
|
No |
1
|
|
Traffic Light Protocol
|
trafficlightprotocol |
singleSelect |
Common Types
|
No |
All
|
|
Updated Date
|
updateddate |
date |
Common Types
|
No |
All
|
|
User ID
|
userid |
shortText |
Common Types
|
No |
All
|
|
Username
|
username |
shortText |
Common Types
|
No |
2
|
|
VT Engine Detection Names
|
vtenginedetectionnames |
tagsSelect |
VirusTotal
|
No |
All
|
|
VT Engine Detections
|
vtenginedetections |
number |
VirusTotal
|
No |
All
|
|
VT Engine Vendors
|
vtenginevendors |
tagsSelect |
VirusTotal
|
No |
All
|
|
Validity Not After
|
validitynotafter |
date |
Common Types
|
No |
1
|
|
Validity Not Before
|
validitynotbefore |
date |
Common Types
|
No |
1
|
|
Vendor
|
vendor |
shortText |
Common Types
|
No |
All
|
|
Version
|
version |
shortText |
Common Types
|
No |
All
|
|
Vulnerabilities
|
vulnerabilities |
multiSelect |
Common Types
|
No |
All
|
|
Vulnerable Products
|
vulnerableproducts |
grid |
Common Types
|
No |
All
|
|
Whois Records
|
whoisrecords |
grid |
Common Types
|
No |
All
|
|
Work Phone
|
workphone |
shortText |
Common Types
|
No |
1
|
|
X.509 v3 Extensions
|
x509v3extensions |
grid |
Common Types
|
No |
1
|
|
XDR status
|
xdrstatus |
singleSelect |
Cortex XDR by Palo Alto Networks
|
No |
3
|
|
XI Application
|
xiapplication |
tagsSelect |
Exodus Intelligence EVE Platform
|
No |
1
|
|
XI Attack Vector
|
xiattackvector |
shortText |
Exodus Intelligence EVE Platform
|
No |
1
|
|
XI CPE MATCH
|
xicpematch |
markdown |
Exodus Intelligence EVE Platform
|
No |
1
|
|
XI CPE23URI
|
xicpe23uri |
multiSelect |
Exodus Intelligence EVE Platform
|
No |
1
|
|
XI CPES
|
xicpes |
longText |
Exodus Intelligence EVE Platform
|
No |
1
|
|
XI CVE
|
xicve |
shortText |
Exodus Intelligence EVE Platform
|
No |
1
|
|
XI CVSS
|
xicvss |
shortText |
Exodus Intelligence EVE Platform
|
No |
1
|
|
XI Description
|
xidescription |
longText |
Exodus Intelligence EVE Platform
|
No |
1
|
|
XI Identifier
|
xiidentifier |
shortText |
Exodus Intelligence EVE Platform
|
No |
1
|
|
XI Links
|
xilinks |
multiSelect |
Exodus Intelligence EVE Platform
|
No |
1
|
|
XI Methods
|
ximethods |
tagsSelect |
Exodus Intelligence EVE Platform
|
No |
All
|
|
XI Mitigation
|
ximitigation |
longText |
Exodus Intelligence EVE Platform
|
No |
1
|
|
XI Modified Timestamp
|
ximodifiedtimestamp |
shortText |
Exodus Intelligence EVE Platform
|
No |
1
|
|
XI Modules
|
ximodules |
tagsSelect |
Exodus Intelligence EVE Platform
|
No |
1
|
|
XI Ports
|
xiports |
tagsSelect |
Exodus Intelligence EVE Platform
|
No |
1
|
|
XI Product
|
xiproduct |
shortText |
Exodus Intelligence EVE Platform
|
No |
1
|
|
XI Publish Date
|
xipublishdate |
shortText |
Exodus Intelligence EVE Platform
|
No |
1
|
|
XI Scores
|
xiscores |
number |
Exodus Intelligence EVE Platform
|
No |
1
|
|
XI Transport
|
xitransport |
tagsSelect |
Exodus Intelligence EVE Platform
|
No |
All
|
|
XI Vendor
|
xivendor |
shortText |
Exodus Intelligence EVE Platform
|
No |
1
|
|
XI ZDIS
|
xizdis |
markdown |
Exodus Intelligence EVE Platform
|
No |
1
|
|
Zip Code
|
zipcode |
shortText |
Common Types
|
No |
1
|
|
imphash
|
imphash |
shortText |
Common Types
|
No |
1
|