Palo Alto Networks Threat Vault v2 Feed

Retrieve Threat Vault predefined EDL content for Malicious IP, Known IP, TOR and Bulletproof hosting.

Data Enrichment & Threat Intelligence · ThreatVault Feed · Feed

Configuration parameters

  • feed — Fetch indicators
  • url — URL (required)
  • credentials — API Key (required)
  • name — Which EDL to pull indicators from (required)
  • list_format — Response Format (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • feedTags — Tags
  • feedReputation — Indicator Reputation
  • feedReliability — Source Reliability (required)
  • feedExpirationPolicy —
  • feedExpirationInterval —
  • feedFetchInterval — Feed Fetch Interval
  • limit — Page Size Limit
  • feedBypassExclusionList — Bypass exclusion list
  • tlp_color — Traffic Light Protocol Color

Commands (1)

  • threatvault-get-indicators

    Retrieves indicators from Threat Vault.