Flashpoint Feed v3.0.1

Ingest indicators of compromise from Flashpoint Ignite.

Author:
Flashpoint
Support:
partner
URL:
https://flashpoint.my.site.com/helpcenter/s/
agentixxsiam
Data Enrichment & Threat Intelligence

Indicator fields (26)

  • FlashpointFeed API
  • FlashpointFeed APT Description
  • FlashpointFeed Attribute ID
  • FlashpointFeed Attribute UUID
  • FlashpointFeed Category
  • FlashpointFeed Created Date
  • FlashpointFeed Event Creator Email
  • FlashpointFeed Event Href
  • FlashpointFeed Event Information
  • FlashpointFeed Event UUID
  • FlashpointFeed External References
  • FlashpointFeed HTML Malware Description
  • FlashpointFeed Indicator ID
  • FlashpointFeed Indicator Type
  • FlashpointFeed Last Score Date
  • FlashpointFeed Last Seen Date
  • FlashpointFeed Latest Sighting
  • FlashpointFeed Malware Description
  • FlashpointFeed Mitre Attack IDs
  • FlashpointFeed Modified Date
  • FlashpointFeed Platform URL
  • FlashpointFeed Report
  • FlashpointFeed Score Value
  • FlashpointFeed Sightings
  • FlashpointFeed Timestamp
  • FlashpointFeed Total Sightings

Indicator types (2)

  • reputation-Flashpoint_Indicator
  • reputation-Ignite_Indicator

Integrations (3)

Layouts (2)

README

Gain access to Flashpoint’s Technical Intelligence dataset, which delivers Indicators of Compromise (IOCs) and technical data derived from Flashpoint’s unique collections and Finished Intelligence Reports. This integration enables the seamless ingestion of high-fidelity intelligence into your existing workflows and automated tools.

Flashpoint is the globally trusted leader in risk intelligence for the fastest, most comprehensive coverage of threatening activity on the internet. From bolstering cyber and physical security, to detecting fraud and insider threats, Flashpoint partners with customers across the private and public sectors to help them rapidly identify threats and mitigate their most critical security risks.

What does this pack do?

Flashpoint Feed Integration allows importing indicators of compromise that occur in the context of an event on the Flashpoint platform.

The following types of indicators are retrieved:

  • IP
  • Domain
  • URL
  • Email
  • File
  • Flashpoint Indicator

Note: All the unsupported types of indicators are considered as Flashpoint Indicator such as ip-dst, Hostname, Filename, Text, Pdb, Yara, etc.