FeedORKL
Use the ORKL Threat Intel Feed integration to get receive threat intelligence indicators from the feed.
Data Enrichment & Threat Intelligence · ORKL Threat Intel Feed · Feed
Configuration parameters
feed— Fetch indicatorsfeedReputation— Indicator ReputationfeedReliability— Source Reliability (required)tlp_color— Traffic Light Protocol ColorfeedExpirationPolicy—feedExpirationInterval—createRelationships— Create RelationshipsfeedFetchInterval— Feed Fetch Intervallimit— Maximum Indicators per fetchfeedTags— TagsfeedBypassExclusionList— Bypass exclusion listverify— Trust any certificate (not secure)proxy— Use system proxy settingsfeedIncremental— Incremental Feed
Commands (1)
-
orkl-get-reportsRetrieves latest Threat Reports from ORKL.