Don’t have XFE credentials?
Create IBM ID: https://www.ibm.com/account/profile/us?page=reg
Login to XFE: https://exchange.xforce.ibmcloud.com/
Select the “Show User Menu” icon
Choose settings / API Access / Generate

Indicators threshold:
Configure the default threshold for each indicator type in the instance settings.
Note that it is also possible to specify the threshold when runing the command.
Indicators with risk score equal or bigger than the threshold will be considered malicious.
Indicators with risk score equal or bigger than half of the threshold value, and lower than the threshold, will be considered suspicious.