DShield Feed

This integration fetches a list that summarizes the top 20 attacking class C (/24) subnets over the last three days from Dshield.

Category

Data Enrichment & Threat Intelligence

Pack

FeedDShield

Configuration parameters

• feed — Fetch indicators
• feedReputation — Indicator Reputation
• feedReliability — Source Reliability (required)
• tlp_color — Traffic Light Protocol Color
• feedExpirationPolicy —
• cidr_32_to_ip — Set /32 CIDRs as IP Indicators
• feedExpirationInterval —
• feedFetchInterval — Feed Fetch Interval
• feedBypassExclusionList — Bypass exclusion list
• feedTags — Tags
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings

Commands (1)

• dshield-get-indicators — Gets the feed indicators.