ThreatGridv2
Query and upload samples to Cisco threat grid.
Forensics & Malware Analysis · Cisco Secure Malware Analytics
Configuration parameters
base_url— Server URL (e.g. https://192.168.0.1) (required)credentials— (required)integrationReliability— Source Reliability (required)insecure— Trust any certificate (not secure)proxy— Use system proxy settings
Commands (34)
-
domainChecks the reputation of a domain.
-
fileChecks the file reputation of the specified hash.
-
ipChecks the reputation of an IP address.
-
threat-grid-analysis-annotations-getReturns data regarding the annotations of the analysis.
-
threat-grid-analysis-artifacts-getReturns the sample id artifact with artifact id.
-
threat-grid-analysis-iocs-getReturns data regarding the specified Indicator of Compromise.
-
threat-grid-analysis-metadata-getReturns metadata about the analysis.
-
threat-grid-analysis-network-streams-getReturns data regarding a specific network stream.
-
threat-grid-analysis-processes-getReturns data regarding the specific process id in the analysis.
-
threat-grid-domain-associated-ipsReturns a list of IPs associated to the domain.
-
threat-grid-domain-associated-urlsReturns a list of URLs associated to the domain.
-
threat-grid-domain-samples-listReturns a list of samples associated with a Domain.
-
threat-grid-feed-specific-getGets a specific threat feed.
-
threat-grid-feeds-artifactGet artifacts threat feed.
-
threat-grid-feeds-domainGet domain threat feed.
-
threat-grid-feeds-ipGet ips threat feed.
-
threat-grid-feeds-network-streamGet network stream threat feed.
-
threat-grid-feeds-pathGet path threat feed.
-
threat-grid-feeds-urlGet url threat feed.
-
threat-grid-ip-associated-domainsReturns a list of domains associated with the IP.
-
threat-grid-ip-associated-urlsReturns a list of URLs associated to the IP.
-
threat-grid-ip-samples-listReturns a list of samples associated with an IP.
-
threat-grid-ip-searchSearch IPs. Please provide a single argument (only one) to use this command, as the API supports 1 filter at a time.
-
threat-grid-path-samples-listReturns a list of samples associated with a Path.
-
threat-grid-rate-limit-getGet rate limit for a specific user name. ThreatGrid employs a simple rate limiting method for sample submissions by specifying the number of samples which can be submitted within some variable time period by a user. Multiple rate limits can be employed to form overlapping submission limits. For example, 20 submissions per hour AND 400 per day.
-
threat-grid-registry-key-samples-listReturns a list of samples associated with a specified registry key.
-
threat-grid-sample-listSearch samples on the Threat Grid platform. Input parameters are ANDed together. Only finished samples can be searched (that is, the ones that are having a status of succ or fail.)
-
threat-grid-sample-summary-getReturns summary analysis information.
-
threat-grid-sample-uploadSubmits a sample to threat grid for analysis. URL or file, not both.
-
threat-grid-submissions-searchSearch threat grid submissions.
-
threat-grid-url-samples-listReturns a list of samples associated with an URL.
-
threat-grid-url-searchSearch urls. Please provide the URL in the format http://example.com:80/ (note that ThreatGrid only support '.com' domains).
-
threat-grid-who-am-iGet logged in user.
-
urlChecks the reputation of a URL.