IocFeedEntry
Information about the IOC.
Fields
| Field | Type | Description |
|---|---|---|
| author | String! | IOC author. |
| disabledInfo | DisabledInfo | Only set if the IOC is deactivated by a user. |
| hashInfo | HashInfo | Hash details if the IOC type is hash. |
| intelId | String! | Unique identifier of the intel. |
| iocStatus | FeedEntryStatus! | Status of the feed entry. |
| iocType | ThreatFeedType! | Type of the IOC. |
| lastUpdatedTime | DateTime | Last updated time of the IOC from the provider. |
| providerInfo | ProviderInfo | Provider specific info. |
| providerIocId | String! | ID of the IOC from the provider. |
| providerMalwareId | String! | ID of the malware from the provider. |
| threatFamily | String! | The Threat Family associated with the IOC. |
| yaraInfo | YaraInfo | YARA rule details if the IOC type is YARA. |
Used By
Queries
- query: iocFeedEntries (via connection)