
Jun 21, 2023
1.0.1
ThreatQ versions >= 4.49.0
DCSO TIE CDF
Overview
The DCSO TIE feed ingests IoCs and related attributes from DCSO’s TIE using the following endpoint:
- DCSO TIE - ingests indicators with related attributes.
The integration ingests the following indicator sub-types:
- FQDN
- URL
- IP Address
- IPv6 Address
- MD5
- SHA-1
- SHA-256
- SHA-384
- SHA-512
- Fuzzy Hash
- Filename
- Email Address
- ASN
The indicators ingested will have the following attributes:
- Minimum and Maximum Severity
- Minimum and Maximum Confidence
- Actors
- Families
- Categories
- Entities