ThreatFox Feed
ThreatFox is a free platform from abuse.ch with the goal of sharing indicators of compromise (IOCs) associated with malware. Use the ThreatFox Feed integration to fetch indicators from the feed.
Data Enrichment & Threat Intelligence · ThreatFox Feed · Feed
Configuration parameters
feed— Fetch indicatorsurl— Server URL (required)credentials—feedReputation— Indicator ReputationfeedReliability— Source Reliability (required)confidence_threshold— Confidence Thresholdtlp_color— Traffic Light Protocol ColorfeedExpirationPolicy—feedExpirationInterval—feedFetchInterval— Feed Fetch Intervalwith_ports— Return IOCs with Portscreate_relationship— Create relationshipfeedBypassExclusionList— Bypass exclusion listproxy— Use system proxy settingsinsecure— Trust any certificate (not secure)feedTags— Tags
Commands (1)
-
threatfox-get-indicatorsRetrieves indicators from the ThreatFox API. Choose one field to search by.