Malware Domain List Active IPs Feed Deprecated
Deprecated. This feed is no longer supported. No available replacement.
Data Enrichment & Threat Intelligence · MalwareDomainList Feed (Deprecated) · Feed
Details
| ID | Malware Domain List Active IPs Feed |
|---|---|
| Provider | Open Source |
| Category | Data Enrichment & Threat Intelligence |
| From Version | 5.5.0 |
| Docker Image | demisto/python3:3.10.13.74666 |
| Supported Modules | Agentix |
Configuration parameters
feed— Fetch indicatorsfeedReputation— Indicator ReputationfeedReliability— Source Reliability (required)tlp_color— Traffic Light Protocol ColorfeedExpirationPolicy—cidr_32_to_ip— Set /32 CIDRs as IP IndicatorsfeedExpirationInterval—feedFetchInterval— Feed Fetch IntervalfeedBypassExclusionList— Bypass exclusion listfeedTags— Tagsinsecure— Trust any certificate (not secure)proxy— Use system proxy settings
Commands (1)
-
malwaredomainlist-get-indicatorsGets the feed indicators.
category: Data Enrichment & Threat Intelligence provider: Open Source commonfields: id: Malware Domain List Active IPs Feed version: -1 configuration: - defaultvalue: 'true' display: Fetch indicators name: feed type: 8 required: false - additionalinfo: Indicators from this integration instance will be marked with this reputation defaultvalue: Bad display: Indicator Reputation name: feedReputation options: - None - Good - Suspicious - Bad type: 18 required: false - additionalinfo: Reliability of the source providing the intelligence data defaultvalue: C - Fairly reliable display: Source Reliability name: feedReliability options: - A - Completely reliable - B - Usually reliable - C - Fairly reliable - D - Not usually reliable - E - Unreliable - F - Reliability cannot be judged required: true type: 15 - additionalinfo: The Traffic Light Protocol (TLP) designation to apply to indicators fetched from the feed display: Traffic Light Protocol Color name: tlp_color options: - RED - AMBER - GREEN - WHITE type: 15 required: false - defaultvalue: indicatorType display: '' name: feedExpirationPolicy options: - never - interval - indicatorType - suddenDeath type: 17 required: false - additionalinfo: When enabled, each /32 CIDR will also be returned as an IP indicator. Only relevant if the integration fetches /32 CIDR indicators. display: Set /32 CIDRs as IP Indicators name: cidr_32_to_ip required: false type: 8 advanced: true - defaultvalue: '20160' display: '' name: feedExpirationInterval type: 1 required: false - defaultvalue: '360' display: Feed Fetch Interval name: feedFetchInterval type: 19 required: false - additionalinfo: When selected, the exclusion list is ignored for indicators from this feed. This means that if an indicator from this feed is on the exclusion list, the indicator might still be added to the system. display: Bypass exclusion list name: feedBypassExclusionList type: 8 required: false - additionalinfo: Supports CSV values. display: Tags name: feedTags type: 0 required: false - display: Trust any certificate (not secure) name: insecure type: 8 required: false - display: Use system proxy settings name: proxy type: 8 required: false deprecated: true description: Deprecated. This feed is no longer supported. No available replacement. display: Malware Domain List Active IPs Feed (Deprecated) name: Malware Domain List Active IPs Feed script: commands: - arguments: - defaultValue: '50' description: The maximum number of results to return. The default value is 50. name: limit description: Gets the feed indicators. name: malwaredomainlist-get-indicators dockerimage: demisto/python3:3.10.13.74666 feed: true runonce: false script: '-' subtype: python3 type: python fromversion: 5.5.0 tests: - No tests (auto formatted)