Anomali ThreatStream Feed

Use the Anomali ThreatStream Feed Integration to fetch indicators from the Anomali ThreatStream.

Data Enrichment & Threat Intelligence · Anomali ThreatStream Feed · Feed

Configuration parameters

  • feed — Fetch indicators
  • fetchBy — Fetch by (required)
  • url — Server URL (e.g., https://www.test.com) (required)
  • credentials — Username (required)
  • feedFetchInterval — Feed Fetch Interval
  • confidenceThreshold — Confidence Threshold
  • feedReliability — Source Reliability (required)
  • tlp_color — Traffic Light Protocol Color
  • feedReputation — Indicator Reputation
  • feedExpirationPolicy —
  • createRelationships — Create relationships
  • insecure — Trust any certificate (not secure)

Commands (1)

  • threatstream-feed-get-indicators

    Gets indicators from the feed. This command is mainly used for testing and debugging purposes.