XFE_v2

IBM X-Force Exchange lets you receive threat intelligence about applications, IP addresses, URls and hashes.

Category

Data Enrichment & Threat Intelligence

Pack

XForceExchange

Configuration parameters

• url — Server URL (e.g. https://api.xforce.ibmcloud.com) (required)
• credentials — API Key (required)
• integrationReliability — Source Reliability (required)
• ip_threshold — IP Threshold. Minimum risk score for the IP to be considered malicious (ranges from 1 to 10).
• url_threshold — URL Threshold. Minimum risk score for the URL to be considered malicious (ranges from 1 to 10).
• cve_threshold — CVE Threshold. Minimum risk score for the URL to be considered malicious (ranges from 1 to 10).
• create_relationships — Create relationships
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings

Commands (8)

• cve-latest — Return the latest vulnerabilities found.
• cve-search — Search for details about the given CVE.
• domain — Check domain reputation.
• file — Check file reputation.
• ip — IP to check.
• url — Check the given URL reputation.
• xfe-search-cves — Gets list of all vulnerabilities associated with the search term.
• xfe-whois — Gets information about the given host address.