ThreatFox Feed
ThreatFox is a free platform from abuse.ch with the goal of sharing indicators of compromise (IOCs) associated with malware. Use the ThreatFox Feed integration to fetch indicators from the feed.
- Category
- Data Enrichment & Threat Intelligence
- Pack
- FeedThreatFox
Configuration parameters
- feed — Fetch indicators
- url — Server URL (required)
- credentials —
- feedReputation — Indicator Reputation
- feedReliability — Source Reliability (required)
- confidence_threshold — Confidence Threshold
- tlp_color — Traffic Light Protocol Color
- feedExpirationPolicy —
- feedExpirationInterval —
- feedFetchInterval — Feed Fetch Interval
- with_ports — Return IOCs with Ports
- create_relationship — Create relationship
- feedBypassExclusionList — Bypass exclusion list
- proxy — Use system proxy settings
- insecure — Trust any certificate (not secure)
- feedTags — Tags
Commands (1)
- threatfox-get-indicators — Retrieves indicators from the ThreatFox API. Choose one field to search by.