CTIX Relations

JSON-encoded relationship data from Cyware Intel Exchange (CTIX) for the indicator (related malware, threat actors, campaigns, etc.).

Cyware Intel Exchange longText

Details

ID	`indicator_ctixrelations`
CLI Name	`ctixrelations`
Type	longText
From Version	6.10.0
Required	No
Read Only	No
Searchable	No
Case Insensitive	Yes
Expiration (hours)	72

Associated Indicator Types

Source

indicatorfield-ctixrelations.json

Download History Raw

{
    "id": "indicator_ctixrelations",
    "version": -1,
    "name": "CTIX Relations",
    "ownerOnly": false,
    "cliName": "ctixrelations",
    "type": "longText",
    "closeForm": false,
    "editForm": true,
    "required": false,
    "neverSetAsRequired": false,
    "isReadOnly": false,
    "useAsKpi": false,
    "locked": false,
    "system": false,
    "content": true,
    "group": 2,
    "hidden": false,
    "associatedToAll": false,
    "associatedTypes": [
        "IP",
        "IPv6",
        "Domain",
        "URL",
        "Email",
        "File",
        "SSDeep",
        "ASN",
        "CIDR",
        "X509 Certificate",
        "Registry Key",
        "Account",
        "MAC Address",
        "Mutex",
        "Software",
        "Malware",
        "Threat Actor",
        "Attack Pattern",
        "Campaign",
        "Course of Action",
        "Intrusion Set",
        "Tool",
        "Report",
        "Infrastructure",
        "CVE",
        "Identity",
        "Location"
    ],
    "unmapped": false,
    "unsearchable": true,
    "caseInsensitive": true,
    "sla": 0,
    "threshold": 72,
    "fromVersion": "6.10.0",
    "description": "JSON-encoded relationship data from Cyware Intel Exchange (CTIX) for the indicator (related malware, threat actors, campaigns, etc.)."
}