FeedMISPThreatActors

Fetches the MISP threat actor galaxy and builds it into Threat Actor indicators in Cortex Threat Intel Management (TIM).

Category

Data Enrichment & Threat Intelligence

Pack

FeedMISPThreatActors

Configuration parameters

• feed — Fetch indicators
• url — MISP Threat actor galaxy raw address (required)
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• feedReputation — Indicator Reputation
• feedReliability — Source Reliability (required)
• feedExpirationPolicy —
• feedExpirationInterval —
• feedFetchInterval — Feed Fetch Interval
• feedBypassExclusionList — Bypass exclusion list
• tlp_color — Traffic Light Protocol Color
• feedTags — Tags

Commands (1)

• mispthreatactors-get-indicators — Retrieves indicators from Threat Vault.