GreyNoise Indicator Feed
GreyNoise is a cybersecurity platform that collects and analyzes Internet-wide scan and attack traffic. With this integration, users can contextualize existing alerts, filter false-positives, identify compromised devices, and track emerging threats. This Integration provides a feed of IPv4 Internet Scanners from GreyNoise.
Data Enrichment & Threat Intelligence · GreyNoise Indicator Feed · Feed
Configuration parameters
feed— Fetch indicatorscredentials— UsernamefeedReputation— Indicator ReputationfeedReliability— Source Reliability (required)greynoiseFeedType— GreyNoise Feed Type (required)feedTags— Tagstlp_color— Traffic Light Protocol ColorfeedExpirationPolicy—feedExpirationInterval—feedFetchInterval— Feed Fetch IntervalfeedBypassExclusionList— Bypass exclusion listproxy— Use system proxy settingsinsecure— Trust any certificate (not secure)
Commands (1)
-
greynoise-get-indicatorsGets the feed indicators.