ThreatExchange v2

Receive threat intelligence about applications, IP addresses, URLs, and hashes. A service by Facebook.

Data Enrichment & Threat Intelligence · ThreatExchange

Configuration parameters

  • app_id — App ID (required)
  • malicious_threshold — Malicious Threshold
  • suspicious_threshold — Suspicious Threshold
  • non_malicious_threshold — Non Malicious Threshold
  • feedReliability — Source Reliability (required)
  • share_level — Share Level Type
  • proxy — Use system proxy settings
  • insecure — Trust any certificate (not secure)

Commands (9)

  • domain

    Checks a domain reputation.

  • file

    Checks the file reputation of the given hash.

  • ip

    Checks the reputation of the given IP address.

  • threatexchange-members

    Returns a list of current members of ThreatExchange, alphabetized by application name. Each application may also include an optional contact email address. You can set this address, if desired, under the settings panel for your application.

  • threatexchange-object-get-by-id

    Gets a ThreatExchange object by ID.

  • threatexchange-query

    Searches for subjective opinions on indicators of compromise stored in ThreatExchange.

  • threatexchange-tagged-objects-list

    Gets a list of tagged objects for a specific ThreatTag.

  • threatexchange-tags-search

    Enables searching for tags in ThreatExchange. With this call, you can search for ThreatTag objects by text.

  • url

    Checks the URL reputation.