ThreatExchange v2

Receive threat intelligence about applications, IP addresses, URLs, and hashes. A service by Facebook.

Category

Data Enrichment & Threat Intelligence

Pack

ThreatExchange

Configuration parameters

• app_id — App ID (required)
• malicious_threshold — Malicious Threshold
• suspicious_threshold — Suspicious Threshold
• non_malicious_threshold — Non Malicious Threshold
• feedReliability — Source Reliability (required)
• share_level — Share Level Type
• proxy — Use system proxy settings
• insecure — Trust any certificate (not secure)

Commands (9)

• domain — Checks a domain reputation.
• file — Checks the file reputation of the given hash.
• ip — Checks the reputation of the given IP address.
• threatexchange-members — Returns a list of current members of ThreatExchange, alphabetized by application name. Each application may also include an optional contact email address. You can set this address, if desired, under the settings panel for your application.
• threatexchange-object-get-by-id — Gets a ThreatExchange object by ID.
• threatexchange-query — Searches for subjective opinions on indicators of compromise stored in ThreatExchange.
• threatexchange-tagged-objects-list — Gets a list of tagged objects for a specific ThreatTag.
• threatexchange-tags-search — Enables searching for tags in ThreatExchange. With this call, you can search for ThreatTag objects by text.
• url — Checks the URL reputation.