Darkmon Feed
Darkmon TIP indicator feed for Cortex XSOAR. Pulls IPs, URLs, domains, file hashes, emails, and accounts from the Darkmon Threat Intel firehose into the XSOAR TIM module. Pair with the Darkmon integration for incident fetching and automation commands.
- Category
- Data Enrichment & Threat Intelligence
- Pack
- Darkmon
Configuration parameters
- base_url — API Base URL
- X-API-KEY — (required)
- insecure — Trust any certificate (not secure)
- proxy — Use system proxy settings
- feed — Fetch indicators
- feedReputation — Indicator Reputation
- feedReliability — Source Reliability (required)
- feedExpirationPolicy —
- feedExpirationInterval —
- feedFetchInterval — Feed Fetch Interval
- feedBypassExclusionList — Bypass exclusion list
- tlp_color — Traffic Light Protocol Color
- feedTags — Tags
- limit — Indicator fetch limit
Commands (1)
- darkmon-get-indicators — Fetch a page of Darkmon indicators on demand without waiting for the next scheduled feed cycle. Useful for debugging.