DShield Feed
This integration fetches a list that summarizes the top 20 attacking class C (/24) subnets over the last three days from Dshield.
Data Enrichment & Threat Intelligence · DShield Feed · Feed
Configuration parameters
feed— Fetch indicatorsfeedReputation— Indicator ReputationfeedReliability— Source Reliability (required)tlp_color— Traffic Light Protocol ColorfeedExpirationPolicy—cidr_32_to_ip— Set /32 CIDRs as IP IndicatorsfeedExpirationInterval—feedFetchInterval— Feed Fetch IntervalfeedBypassExclusionList— Bypass exclusion listfeedTags— Tagsinsecure— Trust any certificate (not secure)proxy— Use system proxy settings
Commands (1)
-
dshield-get-indicatorsGets the feed indicators.