Indicator Types

82 indicator types.

Download CSV
Name Reputation Command Format Script Layout Pack
ACTI Intelligence Alert acti-getThreatIntelReport FormatACTIURL ACTI Intelligence Alert Accenture CTI v2
ACTI Intelligence Report acti-getThreatIntelReport FormatACTIURL ACTI Intelligence Report Accenture CTI v2
ACTI Malware Family acti-get-fundamentals-by-uuid FormatACTIURL ACTI Malware Family Accenture CTI v2
ACTI Threat Actor acti-get-fundamentals-by-uuid FormatACTIURL ACTI Threat Actor Accenture CTI v2
ACTI Threat Campaign acti-get-fundamentals-by-uuid FormatACTIURL ACTI Threat Campaign Accenture CTI v2
ACTI Threat Group acti-get-fundamentals-by-uuid FormatACTIURL ACTI Threat Group Accenture CTI v2
ASN — — ASN Common Types
Account — — Account Indicator Common Types
Attack Pattern — MITRENameByID_Formatter Attack Pattern Common Types
CIDR cidr VerifyCIDR IP Indicator Common Types
CVE cve — CVE Indicator Common Types
Campaign — — Campaign Common Types
Certificate certificate — Certificate Indicator X509Certificate
ChronicleAsset — — ChronicleAsset Indicator Google SecOps
Course of Action — — Course of Action Common Types
Cryptocurrency Address crypto CryptoCurrenciesFormat Cryptocurrency Cryptocurrency
CyCognito Asset — — CyCognito Asset Information CyCognito Feed
Dataminr Pulse Malware Indicator — — Dataminr Pulse Malware Indicator Dataminr Pulse
Dataminr Pulse Threat Actor Indicator — — Dataminr Pulse Threat Actor Indicator Dataminr Pulse
Dataminr Pulse Vulnerability Indicator — — Dataminr Pulse Vulnerability Indicator Dataminr Pulse
DevSecOps Git Commit — — — DevSecOps
DevSecOps IaC Scan Alert — — — DevSecOps
DevSecOps SAST Alert — — — DevSecOps
Domain domain ExtractDomainAndFQDNFromUrlAndEmail Domain Indicator Common Types
DomainGlob — — Domain Indicator Common Types
DomainTools Iris domain — DomainTools Iris Indicator Layout DomainTools Iris Investigate
DomainTools Iris Detect — — DomainTools Iris Detect Indicator Layout DomainTools Iris Detect
Email email ExtractEmailV2 Email Indicator Common Types
Employee — — Employee Indicator Crisis Management
Exodus Intelligence — — — Exodus Intelligence EVE Platform
Feedly Report — — Feedly Report Feedly
File file — File Indicator Common Types
File file — File Indicator OrionMalware
File MD5 file — — Common Types
File SHA-1 file — — Common Types
File SHA-256 file — — Common Types
Flashpoint Indicator — — Flashpoint Indicator Flashpoint Feed
Flashpoint Vulnerability flashpoint-ignite-vulnerability-get — Flashpoint Vulnerability Flashpoint Vulnerability Feed
GIB Compromised IMEI — — GIB Compromised IMEI Layout Group-IB Threat Intelligence
GIB Compromised Mule — — GIB Compromised Mule Layout Group-IB Threat Intelligence
GIB Victim IP — — GIB Victim IP Layout Group-IB Threat Intelligence
Host — — Host Indicator Common Types
IP ip UnEscapeIPs IP Indicator Common Types
IPv6 ipv6 VerifyIPv6Indicator IP Indicator Common Types
IPv6CIDR — — IP Indicator Common Types
Identity — — Identity Common Types
Ignite Indicator — — Ignite Indicator Flashpoint Feed
Infrastructure — — Infrastructure Common Types
Intrusion Set — — Intrusion Set Common Types
JARM — — JARM Indicator Layout JARM
Location — — Location Common Types
MAC Address — — MAC Indicator OTSecurity
MITRE ATT&CK mitre-reputation — MITRE ATT&CK Indicator MITRE IDs (Deprecated)
Malware — — Malware Indicator Common Types
Mutex — — Mutex Common Types
MyCustomIndicator — — — Developer Tools
Onion Address — — Domain Indicator Common Types
Registry Key — — Registry Key Indicator Common Types
Report — — Report Common Types
RiskIQAsset — — RiskIQAsset Indicator RiskIQ Digital Footprint
RiskIQSerialNumber — — RiskIQSerialNumber Indicator PassiveTotal
SafeBreach Command — — SafeBreach Command SafeBreach - Breach and Attack Simulation platform
SafeBreach Domain — — SafeBreach Domain SafeBreach - Breach and Attack Simulation platform
SafeBreach Hash — — SafeBreach Hash SafeBreach - Breach and Attack Simulation platform
SafeBreach IP — — — SafeBreach - Breach and Attack Simulation platform
SafeBreach Port — — SafeBreach Port SafeBreach - Breach and Attack Simulation platform
SafeBreach Process — — SafeBreach Process SafeBreach - Breach and Attack Simulation platform
SafeBreach Protocol — — SafeBreach Protocol SafeBreach - Breach and Attack Simulation platform
SafeBreach Registry — — SafeBreach Registry SafeBreach - Breach and Attack Simulation platform
SafeBreach URL — — SafeBreach URL SafeBreach - Breach and Attack Simulation platform
Sigma Rule — — Sigma Rule Layout Sigma
Software — — Software Common Types
Tactic — MITRENameByID_Formatter Tactic Layout Common Types
Threat Actor — — Threat Actor Common Types
Tool — — Tool Common Types
URL url FormatURL URL Indicator Common Types
Windows Date and Time — — — RDPCacheHunting
Windows Executables — — — RDPCacheHunting
Windows File Path — — — RDPCacheHunting
X509 Certificate — — X509 Certificate Common Types
YARA Rule — — YARA Rule Layout Yara
ssdeep — — — Common Types