The Cisco AMP for Endpoints Integration for ThreatQ allows a user to automatically export hashes to a Cisco AMP for Endpoints blacklist.