Recorded Future Feed
Ingests indicators from Recorded Future feeds into Demisto.
Data Enrichment & Threat Intelligence · Recorded Future Feed · Feed
Configuration parameters
feed— Fetch indicatorsfeedReputation— Indicator ReputationfeedReliability— Source Reliability (required)tlp_color— Traffic Light Protocol ColorfeedExpirationPolicy—feedExpirationInterval—feedFetchInterval— Feed Fetch IntervalfeedBypassExclusionList— Bypass exclusion listinsecure— Trust any certificate (not secure)proxy— Use system proxy settingsindicator_type— Indicator Type (required)api_token— API tokencredentials_api_token—services— Services (required)risk_rule— Risk Rulefusion_file_path— Fusion File PathfeedTags— Tagspolling_timeout— Request Timeout (required)threshold— Malicious Thresholdsuspicious_threshold— Suspicious Thresholdrisk_score_threshold— IOC Risk Score Thresholdperformance— Remove rawJSON from indicators
Commands (2)
-
rf-feed-get-indicatorsGets indicators from the feed.
-
rf-feed-get-risk-rulesGet a list of the risk rules available for an indicator, To limit the 'connectApi' service indicators list.