Cyjax Feed
The feed allows customers to pull indicators of compromise from cyber incidents (IP addresses, URLs, domains, CVE and file hashes).
Data Enrichment & Threat Intelligence · Cyjax Feed · Feed
Configuration parameters
url— Cyjax API URL (required)apikey— API Key (required)insecure— Trust any certificate (not secure)proxy— Use system proxy settingsfeed— Fetch indicatorsfeedReputation— Indicator ReputationfeedReliability— Source Reliability (required)tlp_color— Traffic Light Protocol Coloruse_cyjax_tlp— Use Cyjax feed TLPfeedTags— TagsfeedExpirationPolicy—feedExpirationInterval—feedIncremental— Incremental FeedfeedBypassExclusionList— Bypass exclusion listfeedFetchInterval— Feed Fetch Intervalfirst_fetch— First fetch time (required)
Commands (3)
-
cyjax-get-indicatorsGet indicators.
-
cyjax-indicator-sightingGet sighting of a indicator.
-
cyjax-unset-indicators-last-fetch-dateUnset the indicators feed last fetch date. Should only be used if user needs to use `re-fetch` button and wants to fetch old indicators from CYJAX. Next feed will use date set in first_fetch (default is last 3 days).