Plain Text Feed

Fetches indicators from a plain text feed.

Data Enrichment & Threat Intelligence · Plain Text Feed · Feed

Configuration parameters

  • feed — Fetch indicators
  • url — Server URL (required)
  • credentials — Username
  • auto_detect_type — Auto detect indicator type
  • indicator_type — Indicator Type
  • cidr_32_to_ip — Set /32 CIDRs as IP Indicators
  • custom_indicator_type — Custom Indicator Type
  • feedReputation — Indicator Reputation
  • feedReliability — Source Reliability (required)
  • tlp_color — Traffic Light Protocol Color
  • feedExpirationPolicy
  • feedExpirationInterval
  • feedFetchInterval — Feed Fetch Interval
  • feedBypassExclusionList — Bypass exclusion list
  • polling_timeout — Request Timeout (required)
  • ignore_regex — Ignore Regex
  • feedTags — Tags
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • feed_name — Feed name
  • indicator — Indicator extraction pattern
  • fields — Fields extraction pattern
  • headers — Headers
  • enrichmentExcluded — Enrichment Excluded

Commands (1)

  • plaintext-get-indicators

    Gets indicators from the feed.