FeedUstaThreatStream

Fetches indicators from the USTAv4 Threat Stream feed. The indicators can be of type malicious URLs or malware hashes.

Category

Data Enrichment & Threat Intelligence

Pack

USTAv4

Configuration parameters

• feed — Fetch indicators
• url — Server's URL (required)
• api_key — API Key (required)
• ioc_feed_type — IOC Feed Type (required)
• feedReputation — Indicator Reputation
• feedReliability — Source Reliability (required)
• tlp_color — Traffic Light Protocol Color
• feedFetchInterval — Feed Fetch Interval
• feedBypassExclusionList — Bypass exclusion list
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• feedExpirationPolicy —
• feedExpirationInterval —
• feedTags — Tags

Commands (3)

• usta-tsa-search-malicious-url — Search malicious URL indicators from the feed.
• usta-tsa-search-malware-hash — Search malware hash indicators from the feed.
• usta-tsa-search-phishing-site — Search malicious URL indicators from the feed.